{"report_id":"dd8c3590-e184-4907-b7d6-28728c924d6e","version":0,"status":"done","tags":[],"date":"2026-07-19T15:04:54Z","url":{"schema":"http","addr":"thelightrays.com","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":0,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"title":"Home","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thelightrays.com","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":0,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T15:04:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"thelightrays.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10772,"request_count":2693,"received_data":1977345,"sent_data":1633047,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}]},{"fqdn":"bsc-testnet-rpc.publicnode.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2025-07-05T16:56:28.880252Z","last_seen":"2026-07-14T16:16:10.446782Z","alert_count":0,"request_count":4,"received_data":641,"sent_data":2208,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-07-13T08:23:32.305435Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":593,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thelightrays.com/media/legacy/js/jquery-noconflict.min.js?504da4","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"504da43c893d66e1f5181c5050a0a83b","sha1":"647005fc12b79b3ca2bb30c059899d5994e3e34d","sha256":"b2780d4cc319da7a668fa616e02c74f77835975dd95c989340dc2538709ae805","sha512":"1e60797310be57ceaee2987f61d12a6881daaf8e9a9ba6d2cfad9caad94709b5741069ab5b55a33f4f0a140d4a51faf24610f9696fac83d30ed7d7768f0a92ae","ssdeep":"","tlshash":"0b800008f88280280ab0200ea0300b2ab002238e2030c08800ac0800000828c2a02028","size":27,"data":"","first_seen":"2023-12-04T02:56:40Z","last_seen":"2026-07-21T15:25:14.092001Z","times_seen":3426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cecefb55a6ce9c3348b7e95c0c844360","sha1":"aca5d040fdf4ba3ce240bb346d42a84c312ec15d","sha256":"32101ad2a2fab24df24b9974a9fe1c5aca50d306ea8df6adf888c2b7b0431627","sha512":"994743e30adcafe07931ec3defaa5fedac8a80c587808c9a184032d201600b3224e9da9053ef6462083e4b8f2907bb5ec18dd92ab6ef536a245c516ed0dba159","ssdeep":"","tlshash":"1d21e4f490be30321db3bae166ee13af20d75128e212401a7efd464e97edc907409d29","size":1440,"data":"","first_seen":"2026-07-19T15:05:15.513234Z","last_seen":"2026-07-19T15:19:18.261239Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4af34a4c82de0f3ed65ea668aeba7ed7","sha1":"1f1caced670004c7abff225d06d8f91ca57c592c","sha256":"de8d7a9ae2aaf4ed0057e157ffdf7fe18f2fd911cecaa3f67febbc916b6f3e20","sha512":"987d4f02194896f47eb3df3c153ce0961ff4a04863a9e68b85190cbb7be271ceaa2b9733767dcf1a4e9d35ca7e8b1d6d85f7907c37cb7027392d5243c72bdfbc","ssdeep":"96:Z90SxmPNMRuckY9dHTi6evjJ8G/PlRd47UKbX8S7saALgZcg0no2c:PlxaMRucb95de6WNRm5sS7saA8iNob","tlshash":"2eb107b82aea39d52d0cb102bf774c7c0a1f645b01204fe7852b2ecc395a57d6085de7","size":5141,"data":"","first_seen":"2026-07-08T15:05:27.541499Z","last_seen":"2026-07-19T21:10:19.055905Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f060518c20a92efecc33f1e65773d2e","sha1":"10ef6ad6884ec0cb4353bf0c655e0155e9cd0593","sha256":"14b569ed88423453db5a62c889a5ace54ed74187d38e9b67a16afbeac39026fc","sha512":"67d2a88a16a86c466955ac0e260f8610371dab115785d3a9afea6aa4399dbba4c0c6ca8b73b9556f74b885bf9054418b6c495afa0b9e582b28a243b237b9f292","ssdeep":"","tlshash":"b8700020a033c0c20000a80a0888a8082a882032080880a20800000c8ac088880000c3","size":22,"data":"","first_seen":"2026-07-08T15:05:27.542908Z","last_seen":"2026-07-19T15:19:18.262373Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa6ae67a53ef6bceef8f764a3ba5cb40","sha1":"e81b6db480374a2860c1b5462c38d495d155f3ec","sha256":"8f52ffe39fce326841caaf4617861f66f4b5c3d402e69a13011bbd2df47a899e","sha512":"8c0e9d193d632ec1a06a7e21cb41bc93b1655946fb85dcef3c20f8648693e919352903312029f4de069f15298a7f9803aeddf14e1e1850204d527987edd0333f","ssdeep":"","tlshash":"2d700088883380000c0320020000ea0000200030228f2020000200000a8280000022c2","size":18,"data":"","first_seen":"2026-07-08T15:05:27.54415Z","last_seen":"2026-07-19T15:19:18.262942Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4648bd70e4db095a2f6cc7d2a28ab163","sha1":"4ae82f95b3b74049d69ed986ceab1ad5b5f1fd72","sha256":"894860b7570e6c2166aaf220bd983dae96dedffefb5e37b51235bd8fd010bc0c","sha512":"16fba69afb1e5cf17e2326541c6d7636b6d906b3459cae5c2b9c0dc3c340dea931bc9ffb225274470a93296c67ffe7b33712d28d69fdcba1695ea3ce98ade8d4","ssdeep":"","tlshash":"607000a0803b80000a82222380aca00008202038200800283222a2083f80c28a3820f2","size":25,"data":"","first_seen":"2026-07-08T15:05:27.545405Z","last_seen":"2026-07-19T15:19:18.263411Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fda091254a21a86610c627bfe94d0b2","sha1":"08742580018098777381366ce857f540868170d0","sha256":"98b590cf7f038e8890cf769f778149fbcf9bcece062a8350fb9aaca8e22c1cde","sha512":"c5a5b88fe58b75af546a6a010b511f96b69b8522fdc39b700220c9b8b3683ce5e1f4fac2a5271d9a0c92d7b1079b2d5434f590d2971123bada6c8dae48420c07","ssdeep":"","tlshash":"dbd092f8876d28720275c525169a77c53679a07314016983fd4c151c2ade72f88b97da","size":242,"data":"","first_seen":"2026-06-07T10:25:59.710122Z","last_seen":"2026-07-21T15:25:14.151861Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/sppagebuilder.js?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"601dbe573d6a5a3d3bdc025d62d6cfc9","sha1":"ac12a6343b378d4e96bafa1602ec23dc8d208101","sha256":"3829ab1ab210fac19298175b96a467a1d8f2fde21160fc34b341fc4f28c8ba3d","sha512":"20d20e0d799f692327fc74064b1bdd9dfc5e2e0e54c8a826aa3c2d04a297a954abb650a4f3717085aa3523bb37de11a834495c9667add8f8957d818fd1da1bbc","ssdeep":"1536:hBIfDaQ5EQNejHWv4UgxuyYOcWKhJ0N8lc+AEnDAUFmwaLBqUUA8UusyyoTtjZnt:h6WQuHPuyYOQhJ0NkcTEDAUvaLpUA8su","tlshash":"9683d768b21534751abb62f1106f4649b2326938e50280a878bad5f61f7ccc9737bf7c","size":82249,"data":"","first_seen":"2025-02-27T18:47:39.661469Z","last_seen":"2026-07-21T09:07:52.16663Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de715f451c3333fb7656415f19254164","sha1":"788ecebbf73894dd080b4e951d569db2a88c5691","sha256":"ba7a94a56509c918d42b1cc83a0aaeb4b3f9911aa5b0a068188501640f5f8da1","sha512":"b99a4af42e8f4440374aa3c86159ced53abefb3fc3056e477f673d3c20a486f7cba666eb01ed1315d02295148c42c848f7340d7cf7458acbdfc133e8f14972f3","ssdeep":"","tlshash":"e0415479786ac002223539eb64867204b037ee8cd687a59af0fd294069219fe5153f9d","size":1953,"data":"","first_seen":"2026-07-08T15:05:27.540273Z","last_seen":"2026-07-21T15:08:46.066061Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/vendor/jquery/js/jquery.min.js?3.7.1","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-21T16:23:07.671907Z","times_seen":181011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/jquery.countdown.min.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a79aa1e6716d0ecf341c216170e1d87d","sha1":"4706a318039af36528f23a341196b4facd72a1db","sha256":"b34b1d8ba0904748b45011f05c20ae73e7d9105ebe24c828509ba9f59249b5c0","sha512":"972861efa58d26160aa5a23fae9d2b45595f1b9a33d5b8e504d052a70ef4d36d6e1c6aed669480f95e7e6822054efd44cf153865c748d62855f45a8e13808f04","ssdeep":"","tlshash":"3d8183cea37217c908d95296009e12155237f26fd4d3401cb6fdedc9a859e9e302f678","size":4087,"data":"","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-07-19T15:19:18.281109Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/jquery.sticky.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f383437e1c10b201413396600411d7aa","sha1":"577edfe37cae1f62a29439ee93fbc7f6fe6b8d87","sha256":"520ee992acd9ca5c3494ef576c96c068fef473344d5b94d127b44b83cddf9089","sha512":"8e23b8fcb18c92fc2a87c69026a2aee400ecce9653d346bd66cfcfc7cb1ecd43b369d457047c0879b6b5c2eb66e0b78a26f56b60ff1d75f1398be77152a5a894","ssdeep":"192:5Aezc5XlegOPNgOuR5TGyjbK90bgQZCsSKJKeEL:GrXlcwgy5lIsSoEL","tlshash":"440276c0e72d717385be51ad4a2e52cd32bf4071a5a31c2bbc9cdd5820e6e7a02f5a24","size":8979,"data":"","first_seen":"2023-03-07T13:17:46Z","last_seen":"2026-07-21T15:04:43.551575Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/frontend-edit.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f42a273dddc27d222f994796e38f9a5","sha1":"312ae7bcdd4d2c81fa99fb0dd02587dfc5f358f9","sha256":"1e1a2ae29ead3cf6e0d4839f7450dbf3f9969b172f3e380d7499af600e03f4ff","sha512":"fd492cae23127859620532d57ae4b986973aea6aab252861eb765cee668fb75504b8be271864556722d48196db519c832de4b9bcb92603181297e00e2079e746","ssdeep":"192:P1I67O2/H5GbMbKEtvwx+eUxQ6Kct/YuhO7:NFOwHMQbB+x+eUxQ6Kct/YuO7","tlshash":"0ce19581e76e3917c2ba30dd581e12ce227c6672c6504cb6fcad94e41ad8d3c43b393a","size":6881,"data":"","first_seen":"2026-07-19T15:05:15.520725Z","last_seen":"2026-07-19T15:19:18.260634Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/common.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cf43dea515211d749846b740f8ad105","sha1":"1d4d15015be5cfd6f9ba486b32469f2e15cb0566","sha256":"f2d3f29f2933cbfcd97d2e63d9ac567613bb88fc168de3b8fa796d9dea27ec7d","sha512":"3f32426c7f44a67be9e8e659be416baa9066587620c79b1a818d13df07e0b1a021ac170e1de0db5a9e840812ea32bf034b70940679477b4b1371b9d92ab1c210","ssdeep":"","tlshash":"e7c08c31430204b601298c86217dff4136bba122b14184021666480ac896a4311b38cf","size":144,"data":"","first_seen":"2023-12-03T12:25:18Z","last_seen":"2026-07-21T15:37:03.123514Z","times_seen":1058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/jquery.parallax.js?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2263a15d623dacad22a4d1eee8f2fa82","sha1":"2b50b47ccf6e2e0e8625b6956e8117381bd4c4c7","sha256":"729937c36d78cfec1fd6e3d8529885be8254ccc286bc5b16e721896bd106bbc3","sha512":"332c4db504e3cdd7d7a34eda933b99cef9285775e0a0f3a14dfa326fd8304a40fa672a8216a226f7f2a4a9ccc1ce5533d157a2546104fa7fbcb01b305e069259","ssdeep":"","tlshash":"a511c0a8bd10604bf95b617f81ffb701803bd880a505c915549bf8e80a1cf2a7afbd24","size":898,"data":"","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-07-21T15:37:03.174606Z","times_seen":2161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/addons/text_block.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bcf10858ded5ce02495336d8dbe2923","sha1":"483629a94085d1ccf3ec8b0d0aad68f298fc1804","sha256":"65fce0bdaf54a43e9126c393c94a818f43dc14678f789c0d4f5839e107b22265","sha512":"698b3de9d6d7514255a40074403cdeac64ffd37f6c5568871250ad2cad0b0478ee11072f26e58a153371ebd53acd9285a224eaad4c0dc69e4db44c9f089890a0","ssdeep":"","tlshash":"9f01f4297032007486bf80ef934f22ce70a52017a540dada3d8c96840fe1fa595d39fa","size":690,"data":"","first_seen":"2024-06-29T09:02:54Z","last_seen":"2026-07-21T15:25:14.071676Z","times_seen":957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/bootstrap.min.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78080,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-07-21T15:04:43.732194Z","times_seen":2606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/main.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9193f6023469655c6b8231796e33cc25","sha1":"e489a6f80efa28475a60843b134744e1e5549c31","sha256":"a77b98866af1c51a5b8001d8b69b385bcf65716404f45a223771040e294f281e","sha512":"403836bc38afcfeb2596cf7267908a06d517cde706626bba8599fb4bb7b55a1db2347c0c73ef651d2159ff098b15799adbd2891e66e90c2b665bff8e8c6d12d3","ssdeep":"96:P7Pk30Hl0DCGHoCgHZoDVgbHk6ggH6Pfqy0PclXGvD4IgbX5YNGCgqy2qZa:Pz80F0DFoV5o5si63ckvDsX5YN9pyDZa","tlshash":"d7f13164f3ac1ed3057e616a041e84c8a33e107697420c66e87dba6c6cbdb3d23b2d1d","size":7488,"data":"","first_seen":"2026-07-19T15:05:15.472226Z","last_seen":"2026-07-19T15:19:18.249488Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d19bb389d0f36b9358f317114caf2c53","sha1":"74b65201e04785656e110b7487f36b2def2a1853","sha256":"be7150f2ff314275c56350c3313ebeef8c702fec24b19c388f73ac7df9633cab","sha512":"2a861832b67e0c7de3dac34702cd1d57b01740d3278a3a5cfbc2cd9e1e85de12aada910f1abbca47cf0907df2202acef99abf8ce633804fd2c3941ad12d719fb","ssdeep":"","tlshash":"c97152461ad92e86524707eb3a2db5c9e01eed8d38500d8be23dfc80f865f25d5f56b0","size":3777,"data":"","first_seen":"2026-07-08T15:05:27.539135Z","last_seen":"2026-07-21T03:00:30.482078Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/system/js/core.min.js?e20992","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e20992529fb2ef9afb8bc0a6f96782a8","sha1":"8a6cb1f95bed06381a3342a7cf959509a7071fe6","sha256":"d03b0386b775f28c5f64d70cfa39b695189808d36815315bee3d5773b7d82639","sha512":"3409a3a62519523286e71109abc4c7990b45a75f84fd58859e11fc1b38717c194bbac47e682afeef95a609421f042c2768b62b736c8c4b097523e55c0821b3a2","ssdeep":"192:rCGwKO1HrvAD4qUBZWdHmrQG+mDyVRznG4Wf9QC9DGmwW52FP9yZ8ZaZs:bwx1HjAD46BmrB+mDiRznG4Wf9QCFHo9","tlshash":"a3f1d7e72865927186e8d3ee90915718b437a310b83f8410a458bdfa7f85d02e97f9b4","size":7888,"data":"","first_seen":"2024-08-22T01:46:48Z","last_seen":"2026-07-21T12:38:10.577836Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/dynamic-content.js?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"568d73b5999fe893c509b1983970de20","sha1":"719448c906118d3c0f783ab417dccaeda1cca012","sha256":"474d740702fe73e3d6cc804f507844016bbd21d2e107810c2fc072320e266f4f","sha512":"336c1fd60f6402917ba0daeaf0553567c5a081df59060ade6c6e1532bbf72ee0afa3e8e80d530c17275aaadf4b2992c1a17048d75cfe63cc68cde8015a10be24","ssdeep":"","tlshash":"bc5176b6f0186a3091eb55fb60bf32d4a030651db0c0c4d92ce86ec8997cec621a776f","size":2487,"data":"","first_seen":"2025-02-27T18:47:39.660006Z","last_seen":"2026-07-20T15:20:56.364471Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotqyzdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.967Z","timestamp":1784473456967,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotqyzdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/mrwugmgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.428Z","timestamp":1784473457428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/mrwugmgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 07:51:58 GMT\r\netag: W/\"1b-65614c832cf68\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/qirufort/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.509Z","timestamp":1784473457509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/qirufort/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:11:04 GMT\r\netag: W/\"1b-6561ff1ff680c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7208,"timings":{"blocked":6756,"dns":0,"connect":0,"send":0,"wait":452,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohbbmws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.226Z","timestamp":1784473455226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohbbmws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 17:46:37 GMT\r\netag: W/\"1b-654ef57396ca1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohi6hbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.373Z","timestamp":1784473455373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohi6hbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 16:17:35 GMT\r\netag: W/\"1b-65516547a11bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojqenwl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.559Z","timestamp":1784473455559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojqenwl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:49 GMT\r\netag: W/\"1b-6552e95bffa5b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocmuxux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.000Z","timestamp":1784473456000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocmuxux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:52:09 GMT\r\netag: W/\"1b-6554d4b99ffef\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozcfqmy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.290Z","timestamp":1784473456290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozcfqmy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:07 GMT\r\netag: W/\"1b-6559ade95fe58\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icophisnu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.847Z","timestamp":1784473456847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icophisnu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:56 GMT\r\netag: W/\"1b-655be2b302607\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6139,"timings":{"blocked":5678,"dns":0,"connect":0,"send":0,"wait":461,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosxhaub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.004Z","timestamp":1784473458004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosxhaub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:26 GMT\r\netag: W/\"1b-6567b89690882\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5501,"timings":{"blocked":4981,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico77jqt07zt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.133Z","timestamp":1784473456133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico77jqt07zt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 15:18:21 GMT\r\netag: W/\"1b-65565f8010af2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":980,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolxjral/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.736Z","timestamp":1784473456736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolxjral/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:22 GMT\r\netag: W/\"1b-655a6c2d6e3ed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoocfffv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.358Z","timestamp":1784473457358,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoocfffv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofuaona/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.702Z","timestamp":1784473457702,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofuaona/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2400,"timings":{"blocked":1887,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojcdxxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.368Z","timestamp":1784473458368,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojcdxxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqoghge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.652Z","timestamp":1784473455652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqoghge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:21:48 GMT\r\netag: W/\"1b-65532e3296e81\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeiewig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.759Z","timestamp":1784473455759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeiewig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:55:56 GMT\r\netag: W/\"1b-655350a64efa3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocotzzi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.956Z","timestamp":1784473455956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocotzzi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:47 GMT\r\netag: W/\"1b-6554c701ce2ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconloxmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.382Z","timestamp":1784473457382,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconloxmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 23:30:01 GMT\r\netag: W/\"1b-6560dc514f3de\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiwcyud/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.829Z","timestamp":1784473457829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiwcyud/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:19 GMT\r\netag: W/\"1b-6567997e78486\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6187,"timings":{"blocked":5874,"dns":0,"connect":0,"send":0,"wait":313,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokygwjn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.841Z","timestamp":1784473457841,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokygwjn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3725,"timings":{"blocked":3122,"dns":0,"connect":0,"send":0,"wait":603,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosut9d5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.360Z","timestamp":1784473455360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosut9d5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 14:06:50 GMT\r\netag: W/\"1b-6551480e0b168\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokxmddu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.591Z","timestamp":1784473455591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokxmddu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:29 GMT\r\netag: W/\"1b-6552f55b3873e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoorwecg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.814Z","timestamp":1784473455814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoorwecg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:46:51 GMT\r\netag: W/\"1b-6553ef8d6096c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoejbxav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.342Z","timestamp":1784473456342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoejbxav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:54:26 GMT\r\netag: W/\"1b-655a62cea34f2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorjfurv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.320Z","timestamp":1784473457320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorjfurv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 21:29:10 GMT\r\netag: W/\"1b-655f7f70b11b9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokkatwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.496Z","timestamp":1784473457496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokkatwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:02:38 GMT\r\netag: W/\"1b-6561fd3e046ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6287,"timings":{"blocked":5977,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoghcoqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.043Z","timestamp":1784473458043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoghcoqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:45 GMT\r\netag: W/\"1b-6567b8a870b31\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5844,"timings":{"blocked":4154,"dns":0,"connect":0,"send":1225,"wait":465,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolaquvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.203Z","timestamp":1784473458203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolaquvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:09 GMT\r\netag: W/\"1b-6567b8f899307\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6421,"timings":{"blocked":5828,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoakqypv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.686Z","timestamp":1784473456686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoakqypv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:56 GMT\r\netag: W/\"1b-655a6c14fd6a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconpeqgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.745Z","timestamp":1784473457745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconpeqgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 12:28:44 GMT\r\netag: W/\"25-656691d582dbe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":37,"size_decoded":326,"mime_type":"text/css","magic":"ASCII text","md5":"d728db10251c205528f79fd2a4c6abf5","sha1":"ce9a1c883e1c9324aad0f36ca8caefa7b6be2cdd","sha256":"f0715c873177f79f2b8a5e78dd18364e3402ba0b56d26b07a5f869cfc54c1b86","sha512":"54a730e0adf61b47b331c33a8054138888e7491a4801dd985ffb2b049faed8080e5cfb59964f6ac79c85e989017a4f506b097b17dd614ee60c7cbe97e735a5ea","ssdeep":"","tlshash":"fd800400000d0044d5410d03f00f311115545454445d40703104075cfcf3c3013d03d0","first_seen":"2026-07-19T15:05:15.449253Z","last_seen":"2026-07-19T15:05:15.449253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7046,"timings":{"blocked":6588,"dns":0,"connect":0,"send":0,"wait":458,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaadqrz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.841Z","timestamp":1784473457841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaadqrz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:02 GMT\r\netag: W/\"1b-6567b8462b7f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6518,"timings":{"blocked":5912,"dns":0,"connect":0,"send":0,"wait":606,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowkejqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.217Z","timestamp":1784473458217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowkejqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 15:43:24 GMT\r\netag: W/\"1b-6567ff363a6f9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4088,"timings":{"blocked":3601,"dns":0,"connect":0,"send":0,"wait":487,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqexyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.237Z","timestamp":1784473458237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqexyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:09 GMT\r\netag: W/\"1b-656839f074ea0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6040,"timings":{"blocked":5729,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofywczt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.331Z","timestamp":1784473458331,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofywczt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2021,"timings":{"blocked":1506,"dns":0,"connect":0,"send":0,"wait":515,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xwwbdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.742Z","timestamp":1784473458742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xwwbdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 03:24:04 GMT\r\netag: W/\"1b-6569ddafd7db8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5744,"timings":{"blocked":5405,"dns":0,"connect":0,"send":0,"wait":339,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxjnie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.036Z","timestamp":1784473456036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxjnie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 20:54:16 GMT\r\netag: W/\"1b-655568b7f47bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":929,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xkifoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.411Z","timestamp":1784473457411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xkifoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:22:32 GMT\r\netag: W/\"1b-6561104a6aa6f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4430,"timings":{"blocked":3896,"dns":0,"connect":0,"send":0,"wait":534,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoigfkwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.027Z","timestamp":1784473459027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoigfkwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:42 GMT\r\netag: W/\"1b-656d671376b94\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6631,"timings":{"blocked":6157,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico8jsxbud9i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.128Z","timestamp":1784473456128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico8jsxbud9i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 13:12:22 GMT\r\netag: W/\"1b-65564357c4d58\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":980,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovkphhk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.247Z","timestamp":1784473456247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovkphhk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 14:00:09 GMT\r\netag: W/\"1b-6558d1c0cf1f6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofxfbnt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.076Z","timestamp":1784473457076,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofxfbnt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2586,"timings":{"blocked":1976,"dns":0,"connect":0,"send":0,"wait":610,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomezcpw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.721Z","timestamp":1784473457721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomezcpw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:40 GMT\r\netag: W/\"1b-65664f3639b3f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6999,"timings":{"blocked":6588,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolbhdvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.111Z","timestamp":1784473458111,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolbhdvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:25 GMT\r\netag: W/\"1b-6567b8ceed3ad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomk1vw0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.161Z","timestamp":1784473459161,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomk1vw0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowmebak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.157Z","timestamp":1784473456157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowmebak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:38 GMT\r\netag: W/\"1b-6556c628c437c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":955,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocjtejj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.963Z","timestamp":1784473456963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocjtejj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:49 GMT\r\netag: W/\"1b-655be2e4e5d4e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7395,"timings":{"blocked":6849,"dns":0,"connect":0,"send":0,"wait":546,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconowzhu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.029Z","timestamp":1784473457029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconowzhu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:23 GMT\r\netag: W/\"1b-655be3050b4e4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6720,"timings":{"blocked":6143,"dns":0,"connect":0,"send":0,"wait":577,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovgzbwl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.337Z","timestamp":1784473457337,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovgzbwl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomeunvv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.245Z","timestamp":1784473458245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomeunvv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:17 GMT\r\netag: W/\"1b-656839f8fa8dd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7050,"timings":{"blocked":6509,"dns":0,"connect":0,"send":0,"wait":541,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojceovg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.447Z","timestamp":1784473458447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojceovg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:14 GMT\r\netag: W/\"1b-65683a687d6b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4403,"timings":{"blocked":3822,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeluese/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.996Z","timestamp":1784473458996,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeluese/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1655,"timings":{"blocked":1138,"dns":0,"connect":0,"send":0,"wait":517,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolelzkv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.830Z","timestamp":1784473457830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolelzkv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:20 GMT\r\netag: W/\"1b-6567997ea3406\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6044,"timings":{"blocked":5689,"dns":0,"connect":0,"send":0,"wait":355,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosfzdnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.111Z","timestamp":1784473459111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosfzdnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 14:14:23 GMT\r\netag: W/\"1b-656e34a404132\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6011,"timings":{"blocked":5543,"dns":0,"connect":0,"send":0,"wait":468,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xpklfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.127Z","timestamp":1784473459127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xpklfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 15:53:19 GMT\r\netag: W/\"1b-656e4ac15459f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojpnlop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.447Z","timestamp":1784473455447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojpnlop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 14:21:20 GMT\r\netag: W/\"1b-65528d29deef9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofsensi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.141Z","timestamp":1784473457141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofsensi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:07 GMT\r\netag: W/\"1b-655be32feec65\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/zuaaqlrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.703Z","timestamp":1784473458703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/zuaaqlrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 17:46:02 GMT\r\netag: W/\"1b-65695c7d323f4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6632,"timings":{"blocked":6214,"dns":0,"connect":0,"send":0,"wait":418,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolygdwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.259Z","timestamp":1784473459259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolygdwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:21 GMT\r\netag: W/\"1b-656f1d1789c49\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icone3dbj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.218Z","timestamp":1784473456218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icone3dbj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 01:46:50 GMT\r\netag: W/\"1b-65582dd7b3f75\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodhlihj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.306Z","timestamp":1784473457306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodhlihj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 07:44:43 GMT\r\netag: W/\"1b-655ec7293cd84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohzdnza/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.942Z","timestamp":1784473457942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohzdnza/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:58 GMT\r\netag: W/\"1b-6567b87b7bebd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5858,"timings":{"blocked":5395,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoggycwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.156Z","timestamp":1784473458156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoggycwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:47 GMT\r\netag: W/\"1b-6567b8e34a1db\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4574,"timings":{"blocked":3992,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokgxccf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.917Z","timestamp":1784473458917,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokgxccf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1806,"timings":{"blocked":1334,"dns":0,"connect":0,"send":0,"wait":472,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xgsnbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.060Z","timestamp":1784473459060,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xgsnbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1636,"timings":{"blocked":1121,"dns":0,"connect":0,"send":0,"wait":515,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqjegbl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.994Z","timestamp":1784473455994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqjegbl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:34:52 GMT\r\netag: W/\"1b-6554d0dc65dce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohbeenb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.822Z","timestamp":1784473456822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohbeenb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:51 GMT\r\netag: W/\"1b-655bb6326e427\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodhzeuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.115Z","timestamp":1784473457115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodhzeuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:54 GMT\r\netag: W/\"1b-655be322b8f22\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokzroat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.727Z","timestamp":1784473457727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokzroat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:44 GMT\r\netag: W/\"1b-65664f39e90fc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4702,"timings":{"blocked":4121,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/cqufnuah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.775Z","timestamp":1784473457775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/cqufnuah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 00:03:35 GMT\r\netag: W/\"1b-65672d2582ea0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5893,"timings":{"blocked":5430,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqwzpua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.144Z","timestamp":1784473458144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqwzpua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:44 GMT\r\netag: W/\"1b-6567b8e0db11d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4574,"timings":{"blocked":3992,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoexckat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.543Z","timestamp":1784473458543,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoexckat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoipgyip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.287Z","timestamp":1784473459287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoipgyip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 14:31:43 GMT\r\netag: W/\"1b-656f7a614198b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomyyivf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.679Z","timestamp":1784473456679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomyyivf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:53 GMT\r\netag: W/\"1b-655a6c11cff08\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoybmwtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.498Z","timestamp":1784473457498,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoybmwtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopyhadt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.772Z","timestamp":1784473457772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopyhadt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 20:31:30 GMT\r\netag: W/\"1b-6566fdbe379ef\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4405,"timings":{"blocked":3988,"dns":0,"connect":0,"send":0,"wait":417,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokljlac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.475Z","timestamp":1784473458475,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokljlac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohvmeeu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.516Z","timestamp":1784473458516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohvmeeu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:41 GMT\r\netag: W/\"1b-65683a8246007\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogwrujt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.991Z","timestamp":1784473458991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogwrujt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 20:41:35 GMT\r\netag: W/\"1b-656d495298942\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3757,"timings":{"blocked":3254,"dns":0,"connect":0,"send":0,"wait":503,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopyrxzz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.139Z","timestamp":1784473459139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopyrxzz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:36:50 GMT\r\netag: W/\"1b-656e547aaf3ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6514,"timings":{"blocked":5998,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowan50i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.162Z","timestamp":1784473459162,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowan50i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoawulad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.434Z","timestamp":1784473456434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoawulad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:21 GMT\r\netag: W/\"1b-655a6bbad173d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosjerae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.545Z","timestamp":1784473456545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosjerae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:04 GMT\r\netag: W/\"1b-655a6be3cbad5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoceqona/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.473Z","timestamp":1784473458473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoceqona/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:23 GMT\r\netag: W/\"1b-65683a710214e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4875,"timings":{"blocked":4412,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoguncfl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.975Z","timestamp":1784473458975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoguncfl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 10:59:24 GMT\r\netag: W/\"1b-656cc73142358\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3255,"timings":{"blocked":2859,"dns":0,"connect":0,"send":0,"wait":396,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-testnet-rpc.publicnode.com/","fqdn":"bsc-testnet-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:27.540Z","timestamp":1784473467540,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-testnet-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nContent-Type: application/json\r\nContent-Length: 137\r\nOrigin: https://thelightrays.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0x0cD58060328e308a43d3c53cfd03A45233EA308a\",\"data\":\"0x6d4ce63c\"},\"latest\"],\"id\":97,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocttvrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.152Z","timestamp":1784473456152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocttvrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:36 GMT\r\netag: W/\"1b-6556c6267083d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoldpjak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.588Z","timestamp":1784473458588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoldpjak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:09 GMT\r\netag: W/\"1b-65683a9c7619b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoo92ghb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.924Z","timestamp":1784473455924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoo92ghb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:33:00 GMT\r\netag: W/\"1b-65549accd1175\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoudmekg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.074Z","timestamp":1784473456074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoudmekg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:34:25 GMT\r\netag: W/\"1b-65558c83ccac3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogwwmhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.962Z","timestamp":1784473456962,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogwwmhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3358,"timings":{"blocked":2809,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowsyeba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.966Z","timestamp":1784473456966,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowsyeba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconwcrhn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.282Z","timestamp":1784473457282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconwcrhn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 01:19:29 GMT\r\netag: W/\"1b-655e710e06dc7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofmiedq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.051Z","timestamp":1784473458051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofmiedq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:52 GMT\r\netag: W/\"1b-6567b8aecd9ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoshwbgt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.541Z","timestamp":1784473458541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoshwbgt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:49 GMT\r\netag: W/\"1b-65683a894ec84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5107,"timings":{"blocked":4761,"dns":0,"connect":0,"send":0,"wait":346,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyfmhwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.265Z","timestamp":1784473459265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyfmhwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 08:56:16 GMT\r\netag: W/\"1b-656f2f6702931\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5484,"timings":{"blocked":5144,"dns":0,"connect":0,"send":0,"wait":340,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowqelzw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.838Z","timestamp":1784473455838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowqelzw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:17:07 GMT\r\netag: W/\"1b-6553f65140b57\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconbdrzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.092Z","timestamp":1784473456092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconbdrzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 00:27:43 GMT\r\netag: W/\"1b-6555986da2cde\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/n3s/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.113Z","timestamp":1784473456113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/n3s/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 08:04:24 GMT\r\netag: W/\"1b-6555fe81da59f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":965,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/irwley/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.139Z","timestamp":1784473456139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/irwley/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 18:24:08 GMT\r\netag: W/\"1b-6556890767091\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1012,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobamnjo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.748Z","timestamp":1784473456748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobamnjo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 21:34:05 GMT\r\netag: W/\"1b-655a79145bc92\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohblvta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.506Z","timestamp":1784473457506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohblvta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:10:21 GMT\r\netag: W/\"1b-6561fef6fb488\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6157,"timings":{"blocked":5778,"dns":0,"connect":0,"send":0,"wait":379,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotrtpwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.672Z","timestamp":1784473457672,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotrtpwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3800,"timings":{"blocked":3396,"dns":0,"connect":0,"send":0,"wait":404,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotouhad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.861Z","timestamp":1784473457861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotouhad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:09 GMT\r\netag: W/\"1b-6567b84d16fab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7215,"timings":{"blocked":6741,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohnedhi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.078Z","timestamp":1784473456078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohnedhi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:34:51 GMT\r\netag: W/\"1b-65558c9d54cd8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7669,"timings":{"blocked":7075,"dns":0,"connect":0,"send":0,"wait":594,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoajnjfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.682Z","timestamp":1784473456682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoajnjfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:54 GMT\r\netag: W/\"1b-655a6c12e3547\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icossedvl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.530Z","timestamp":1784473457530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icossedvl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 03:43:28 GMT\r\netag: W/\"1b-656256d52ae92\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6296,"timings":{"blocked":5960,"dns":0,"connect":0,"send":0,"wait":336,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_ntybkj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.618Z","timestamp":1784473457618,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_ntybkj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":2399,"timings":{"blocked":74,"dns":0,"connect":0,"send":1715,"wait":610,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoolydse/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.647Z","timestamp":1784473457647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoolydse/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:51 GMT\r\netag: W/\"1b-6565a67f66488\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":447,"dns":0,"connect":0,"send":0,"wait":483,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoliojci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.720Z","timestamp":1784473457720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoliojci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 06:58:14 GMT\r\netag: W/\"1b-656647f66828b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4697,"timings":{"blocked":4115,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorddyzl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.991Z","timestamp":1784473457991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorddyzl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:20 GMT\r\netag: W/\"1b-6567b89105968\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6532,"timings":{"blocked":5939,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodphajy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.265Z","timestamp":1784473458265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodphajy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:28 GMT\r\netag: W/\"1b-65683a02f443a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4251,"timings":{"blocked":3829,"dns":0,"connect":0,"send":0,"wait":422,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokmr2if/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.468Z","timestamp":1784473455468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokmr2if/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 16:45:18 GMT\r\netag: W/\"1b-6552ad5776970\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoosvryv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.075Z","timestamp":1784473456075,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoosvryv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoigussh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.728Z","timestamp":1784473456728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoigussh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:18 GMT\r\netag: W/\"1b-655a6c29d0770\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobycjbw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.148Z","timestamp":1784473457148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobycjbw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:10 GMT\r\netag: W/\"1b-655be3329d4bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolkzfbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.866Z","timestamp":1784473457866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolkzfbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:12 GMT\r\netag: W/\"1b-6567b84fb9c89\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5380,"timings":{"blocked":4683,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xskzex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.743Z","timestamp":1784473458743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xskzex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 03:24:05 GMT\r\netag: W/\"1b-6569ddb16f155\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3583,"timings":{"blocked":3261,"dns":0,"connect":0,"send":0,"wait":322,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojppuwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.822Z","timestamp":1784473458822,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojppuwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:21:26 GMT\r\netag: W/\"1b-656b4732685f5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoecdzog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.834Z","timestamp":1784473458834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoecdzog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:44:09 GMT\r\netag: W/\"1b-656b4c46c0d1c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5681,"timings":{"blocked":5371,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoy2ldr8/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.326Z","timestamp":1784473455326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoy2ldr8/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 05:55:50 GMT\r\netag: W/\"1b-6550da4f5307f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosgdhmg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.260Z","timestamp":1784473456260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosgdhmg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 22:28:30 GMT\r\netag: W/\"1b-65594360c8b3e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoajgohj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.564Z","timestamp":1784473456564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoajgohj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:10 GMT\r\netag: W/\"1b-655a6be98966f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorauewt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.585Z","timestamp":1784473456585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorauewt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:17 GMT\r\netag: W/\"1b-655a6befd4ba9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojagpbt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.716Z","timestamp":1784473456716,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojagpbt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoovrqil/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.062Z","timestamp":1784473457062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoovrqil/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:34 GMT\r\netag: W/\"1b-655be30fa818c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/gecko_djnycj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.148Z","timestamp":1784473459148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/gecko_djnycj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 18:03:07 GMT\r\netag: W/\"1e-656e67c454c1b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":4874,"timings":{"blocked":4565,"dns":0,"connect":0,"send":0,"wait":309,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeizwtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.991Z","timestamp":1784473456991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeizwtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:03 GMT\r\netag: W/\"1b-655be2f25f0ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5749,"timings":{"blocked":5230,"dns":0,"connect":0,"send":0,"wait":519,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqdwrxj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.053Z","timestamp":1784473458053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqdwrxj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:52 GMT\r\netag: W/\"1b-6567b8af6cc8b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6586,"timings":{"blocked":6189,"dns":0,"connect":0,"send":0,"wait":397,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeamade/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.370Z","timestamp":1784473456370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeamade/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:01 GMT\r\netag: W/\"1b-655a6ba6ff3d0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogsgkdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.908Z","timestamp":1784473456908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogsgkdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:21 GMT\r\netag: W/\"1b-655be2ca5be6e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowuuxrf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.977Z","timestamp":1784473456977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowuuxrf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:56 GMT\r\netag: W/\"1b-655be2eb6cb9f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoehsgfz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.580Z","timestamp":1784473457580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoehsgfz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 01:02:56 GMT\r\netag: W/\"1b-656374d1359d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6620,"timings":{"blocked":6126,"dns":0,"connect":0,"send":0,"wait":494,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconiimbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.318Z","timestamp":1784473458318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconiimbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:00 GMT\r\netag: W/\"1b-65683a21eeece\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6990,"timings":{"blocked":6475,"dns":0,"connect":0,"send":0,"wait":515,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xmktix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.629Z","timestamp":1784473458629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xmktix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 21:03:24 GMT\r\netag: W/\"1b-656846bcac5da\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5061,"timings":{"blocked":4755,"dns":0,"connect":0,"send":0,"wait":306,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxpwhpn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.059Z","timestamp":1784473456059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxpwhpn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:23:15 GMT\r\netag: W/\"1b-65557c9c11dc1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohumqaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.345Z","timestamp":1784473456345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohumqaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:54:27 GMT\r\netag: W/\"1b-655a62cf698d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobiryzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.062Z","timestamp":1784473458062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobiryzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:57 GMT\r\netag: W/\"1b-6567b8b44fc26\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7176,"timings":{"blocked":6637,"dns":0,"connect":0,"send":0,"wait":539,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoavycpf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.898Z","timestamp":1784473458898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoavycpf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:57:39 GMT\r\netag: W/\"25-656bd566e1715\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":329,"mime_type":"text/css","magic":"ASCII text","md5":"f974627daed33f6e2af72c15959cdb6f","sha1":"ba316511bdc3fc4f40241a7ca8bc9453ff4ffcdf","sha256":"ccf956288c10832273c31d4c6a79261b9c3d53c034107e38f9cf5a7218560a81","sha512":"37ca56a6ae4e8345e5bfd257fdad29b9cc903c8e65801ad8b6a1affb4a90d6cd3c4d40e05ae98bd4f6d1036ab1b3f0686722955fad95bc71fa3e85071c75b367","ssdeep":"","tlshash":"7f80002000ce2008fa820e03b02f32232338f80882ae803020080eac8ce3cb0a3c03b0","first_seen":"2026-07-19T15:05:15.456524Z","last_seen":"2026-07-19T15:05:15.456524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6139,"timings":{"blocked":5704,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoafazcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.293Z","timestamp":1784473456293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoafazcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:08 GMT\r\netag: W/\"1b-6559ade9ea917\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2jrbyhb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.766Z","timestamp":1784473456766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2jrbyhb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 08:34:30 GMT\r\netag: W/\"1b-655b0cb19b0cf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowrnhdu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.844Z","timestamp":1784473456844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowrnhdu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:55 GMT\r\netag: W/\"1b-655be2b16a2cb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoelbbih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.630Z","timestamp":1784473457630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoelbbih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 10:57:38 GMT\r\netag: W/\"1b-65653b9c11c8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":445,"dns":0,"connect":0,"send":0,"wait":437,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolxnlxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.064Z","timestamp":1784473456064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolxnlxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:24:03 GMT\r\netag: W/\"1b-65557cca26baa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyutlio/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.094Z","timestamp":1784473456094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyutlio/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 00:27:44 GMT\r\netag: W/\"1b-6555986e9dc7d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1013,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqsjqwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.734Z","timestamp":1784473456734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqsjqwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:21 GMT\r\netag: W/\"1b-655a6c2ceb62d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotetuou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.089Z","timestamp":1784473457089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotetuou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:41 GMT\r\netag: W/\"1b-655be3169c5dc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6643,"timings":{"blocked":6105,"dns":0,"connect":0,"send":0,"wait":538,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiomwlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.009Z","timestamp":1784473458009,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiomwlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokjjdct/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.362Z","timestamp":1784473458362,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokjjdct/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xpzhmi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.635Z","timestamp":1784473458635,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xpzhmi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2743,"timings":{"blocked":2189,"dns":0,"connect":0,"send":0,"wait":554,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icortcydv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.403Z","timestamp":1784473456403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icortcydv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:12 GMT\r\netag: W/\"1b-655a6bb179da6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojbrfgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.491Z","timestamp":1784473456491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojbrfgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:41 GMT\r\netag: W/\"1b-655a6bcd81a0a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolrbsib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.140Z","timestamp":1784473457140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolrbsib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:07 GMT\r\netag: W/\"1b-655be32f68026\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyouaav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.994Z","timestamp":1784473457994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyouaav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:22 GMT\r\netag: W/\"1b-6567b892df386\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7098,"timings":{"blocked":6647,"dns":0,"connect":0,"send":0,"wait":451,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorrdmmo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.971Z","timestamp":1784473456971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorrdmmo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:52 GMT\r\netag: W/\"1b-655be2e831946\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodrfrms/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.275Z","timestamp":1784473457275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodrfrms/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 00:54:20 GMT\r\netag: W/\"1b-655e6b6ec991e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokpejaz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.320Z","timestamp":1784473458320,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokpejaz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2144,"timings":{"blocked":1628,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojuiuzb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.437Z","timestamp":1784473455437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojuiuzb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 07:46:42 GMT\r\netag: W/\"1b-655234f44ec6c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorrzdph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.565Z","timestamp":1784473455565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorrzdph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:52 GMT\r\netag: W/\"1b-6552e95e6eb24\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoow11rd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.213Z","timestamp":1784473456213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoow11rd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 20:30:06 GMT\r\netag: W/\"1b-6557e70c02bc2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxfljyc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.479Z","timestamp":1784473456479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxfljyc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:35 GMT\r\netag: W/\"1b-655a6bc843d50\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojrgqup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.746Z","timestamp":1784473456746,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojrgqup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:27 GMT\r\netag: W/\"1b-655a6c32bf928\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofpvier/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.859Z","timestamp":1784473456859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofpvier/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:02 GMT\r\netag: W/\"1b-655be2b8a7af9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojwjqgb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.097Z","timestamp":1784473457097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojwjqgb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:44 GMT\r\netag: W/\"1b-655be319cad15\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6775,"timings":{"blocked":6281,"dns":0,"connect":0,"send":0,"wait":494,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooatnzy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.302Z","timestamp":1784473457302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooatnzy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 06:38:40 GMT\r\netag: W/\"1b-655eb86652168\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icounsynp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.987Z","timestamp":1784473456987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icounsynp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:00 GMT\r\netag: W/\"1b-655be2efb2795\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5621,"timings":{"blocked":5041,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobmwttv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.544Z","timestamp":1784473457544,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobmwttv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icormfkkk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.653Z","timestamp":1784473458653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icormfkkk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 01:28:44 GMT\r\netag: W/\"1b-6568820ba5a45\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4444,"timings":{"blocked":4282,"dns":0,"connect":0,"send":0,"wait":162,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotrnojn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.714Z","timestamp":1784473458714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotrnojn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 00:18:40 GMT\r\netag: W/\"1b-6569b43f3219e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4019,"timings":{"blocked":3560,"dns":0,"connect":0,"send":0,"wait":459,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotifrdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.951Z","timestamp":1784473458951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotifrdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:54 GMT\r\netag: W/\"1b-656c9575a7b61\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3779,"timings":{"blocked":3269,"dns":0,"connect":0,"send":0,"wait":510,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokd4cgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.058Z","timestamp":1784473459058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokd4cgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 02:13:32 GMT\r\netag: W/\"1b-656d9384a6b34\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6319,"timings":{"blocked":5968,"dns":0,"connect":0,"send":0,"wait":351,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobxdefu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.070Z","timestamp":1784473459070,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobxdefu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyctadh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.892Z","timestamp":1784473456892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyctadh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:15 GMT\r\netag: W/\"1b-655be2c4e289b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocrynff/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.015Z","timestamp":1784473457015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocrynff/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:15 GMT\r\netag: W/\"1b-655be2fe19f73\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6427,"timings":{"blocked":6102,"dns":0,"connect":0,"send":0,"wait":325,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodhmefs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.125Z","timestamp":1784473458125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodhmefs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:34 GMT\r\netag: W/\"1b-6567b8d704846\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodtrbo5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.231Z","timestamp":1784473458231,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodtrbo5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2976,"timings":{"blocked":2411,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxjbkbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.360Z","timestamp":1784473458360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxjbkbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:25 GMT\r\netag: W/\"1b-65683a39bcac5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6789,"timings":{"blocked":6334,"dns":0,"connect":0,"send":0,"wait":455,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxfwjhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.708Z","timestamp":1784473456708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxfwjhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:07 GMT\r\netag: W/\"1b-655a6c1f6d49a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6835,"timings":{"blocked":6340,"dns":0,"connect":0,"send":0,"wait":495,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojperho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.433Z","timestamp":1784473457433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojperho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:12:33 GMT\r\netag: W/\"1b-656186c21fd27\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxtcvim/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.657Z","timestamp":1784473457657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxtcvim/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:59 GMT\r\netag: W/\"1b-6565a687548e0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xbncuv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.791Z","timestamp":1784473457791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xbncuv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:28:56 GMT\r\netag: W/\"1b-65678347b2a73\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5323,"timings":{"blocked":4703,"dns":0,"connect":0,"send":0,"wait":620,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokqncka/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.205Z","timestamp":1784473458205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokqncka/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:10 GMT\r\netag: W/\"1b-6567b8f934767\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6826,"timings":{"blocked":6423,"dns":0,"connect":0,"send":0,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovypetl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.335Z","timestamp":1784473456335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovypetl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 18:37:03 GMT\r\netag: W/\"1b-655a51823d17b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/dynamic-content.js?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.310Z","timestamp":1784473459310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/js/dynamic-content.js?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: W/\"68195cae-9b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoglhdyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.175Z","timestamp":1784473455175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoglhdyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 12:26:18 GMT\r\netag: W/\"1b-654d6bfda9fea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocsgzdd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.696Z","timestamp":1784473455696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocsgzdd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:43:34 GMT\r\netag: W/\"1b-6553331061bd4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorbtcup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.464Z","timestamp":1784473456464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorbtcup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:30 GMT\r\netag: W/\"1b-655a6bc299a35\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocyzvlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.005Z","timestamp":1784473457005,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocyzvlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3958,"timings":{"blocked":3362,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnokqp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.040Z","timestamp":1784473457040,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnokqp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooqyv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.706Z","timestamp":1784473457706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooqyv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 12 Jul 2026 00:10:21 GMT\r\netag: W/\"6a52db6d-47f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1151,"size_decoded":591,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"70332e1c878818dc5e4ac747716b783a","sha1":"8ef6e23551458e446e1c487033e1e6b0e122c64b","sha256":"99901486a68064306bfcaea9d46ea8535fe92d45bb83d6b09e4e97070ea5da19","sha512":"66a0e8f9bc399d7f27f5f4a153bd1aa5870b4c2dc72910f1e47dd8ffe285c09f52be7d7063854cc6bb66e43e1f749d48be1d52f895db0f514df518c838ab55b5","ssdeep":"","tlshash":"702123b69c58658183309cc837a72b106b48b21146451df6fa2f280cfff7a18439a7bd","first_seen":"2026-07-19T15:05:15.459305Z","last_seen":"2026-07-19T15:05:15.459305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4333,"timings":{"blocked":3808,"dns":0,"connect":0,"send":0,"wait":525,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocfmisv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.261Z","timestamp":1784473458261,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocfmisv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovhptmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.288Z","timestamp":1784473455288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovhptmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 21:47:17 GMT\r\netag: W/\"1b-65506d1bb6bca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovkvbvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.899Z","timestamp":1784473456899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovkvbvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:19 GMT\r\netag: W/\"1b-655be2c827733\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoairare/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.648Z","timestamp":1784473457648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoairare/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:55 GMT\r\netag: W/\"1b-6565a6838cc84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":444,"dns":0,"connect":0,"send":0,"wait":446,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohpjceb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.934Z","timestamp":1784473457934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohpjceb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:52 GMT\r\netag: W/\"1b-6567b8762f7a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7210,"timings":{"blocked":6731,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokjskuq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.290Z","timestamp":1784473458290,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokjskuq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2041,"timings":{"blocked":1525,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxozoen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.443Z","timestamp":1784473458443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxozoen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:12 GMT\r\netag: W/\"1b-65683a6694293\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohrwttm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.821Z","timestamp":1784473456821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohrwttm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:50 GMT\r\netag: W/\"1b-655bb631dcc06\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoefrxky/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.076Z","timestamp":1784473456076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoefrxky/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:34:42 GMT\r\netag: W/\"1b-65558c9483f7c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoircwhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.017Z","timestamp":1784473457017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoircwhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:16 GMT\r\netag: W/\"1b-655be2fea3a92\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopmnbvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.458Z","timestamp":1784473457458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopmnbvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:29:33 GMT\r\netag: W/\"1b-65618a8f2c385\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":5456,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconogmik/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.668Z","timestamp":1784473458668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconogmik/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 05:23:00 GMT\r\netag: W/\"1b-6568b6684d306\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofunbom/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.617Z","timestamp":1784473455617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofunbom/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:19:54 GMT\r\netag: W/\"1b-65532dc68da8e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohybluf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.056Z","timestamp":1784473456056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohybluf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:22:46 GMT\r\netag: W/\"1b-65557c7fcd88f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqxyioi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.234Z","timestamp":1784473456234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqxyioi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:43:56 GMT\r\netag: W/\"1b-6558ce20e34a0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovwgqkq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.294Z","timestamp":1784473457294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovwgqkq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:56:15 GMT\r\netag: W/\"1b-655ea181d61c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotjhequ/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.448Z","timestamp":1784473457448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotjhequ/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:24:19 GMT\r\netag: W/\"1b-65618963bdfaa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico8x08dh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.609Z","timestamp":1784473457609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico8x08dh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 00:02:33 GMT\r\netag: W/\"1b-6564a92fe1b86\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4523,"timings":{"blocked":54,"dns":0,"connect":0,"send":4015,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomfwxlw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.808Z","timestamp":1784473458808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomfwxlw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 19:36:23 GMT\r\netag: W/\"1b-656ab704211cc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5560,"timings":{"blocked":5128,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorislbb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.635Z","timestamp":1784473456635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorislbb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:34 GMT\r\netag: W/\"1b-655a6bffe0259\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6855,"timings":{"blocked":6359,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xxntlk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.716Z","timestamp":1784473457716,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xxntlk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2250,"timings":{"blocked":1513,"dns":0,"connect":0,"send":0,"wait":737,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouibwya/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.736Z","timestamp":1784473455736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouibwya/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:53:57 GMT\r\netag: W/\"1b-65535034bebad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoq4h2ya/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.283Z","timestamp":1784473457283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoq4h2ya/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 01:19:29 GMT\r\netag: W/\"1b-655e710e09ca7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyntv07/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.057Z","timestamp":1784473459057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyntv07/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 02:13:30 GMT\r\netag: W/\"1b-656d9382946d5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5051,"timings":{"blocked":4790,"dns":0,"connect":0,"send":0,"wait":261,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogkkewv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.744Z","timestamp":1784473455744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogkkewv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:54:32 GMT\r\netag: W/\"1b-65535056797d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotlpibn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.309Z","timestamp":1784473456309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotlpibn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 09:52:22 GMT\r\netag: W/\"1b-6559dc3c1cd16\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoimqlsb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.515Z","timestamp":1784473456515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoimqlsb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:52 GMT\r\netag: W/\"1b-655a6bd7e3d40\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosworvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.739Z","timestamp":1784473457739,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosworvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2256,"timings":{"blocked":1553,"dns":0,"connect":0,"send":0,"wait":703,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouyjlns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.502Z","timestamp":1784473458502,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouyjlns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1943,"timings":{"blocked":1243,"dns":0,"connect":0,"send":0,"wait":700,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xhesaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.754Z","timestamp":1784473458754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xhesaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:11:04 GMT\r\netag: W/\"1b-656a106cffb35\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodshrfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.823Z","timestamp":1784473455823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodshrfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:46:54 GMT\r\netag: W/\"1b-6553ef9085468\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaebkuz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.870Z","timestamp":1784473455870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaebkuz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:18:48 GMT\r\netag: W/\"1b-6553f6b21f875\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojzynrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.035Z","timestamp":1784473456035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojzynrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 20:46:37 GMT\r\netag: W/\"1b-655567023cead\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":929,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbvtfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.487Z","timestamp":1784473456487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbvtfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:39 GMT\r\netag: W/\"1b-655a6bcb7054c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconokogp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.832Z","timestamp":1784473456832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconokogp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:47 GMT\r\netag: W/\"1b-655be2aa00b7e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoikyfne/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.858Z","timestamp":1784473456858,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoikyfne/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3398,"timings":{"blocked":2828,"dns":0,"connect":0,"send":0,"wait":570,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoahbjnh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.183Z","timestamp":1784473457183,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoahbjnh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2534,"timings":{"blocked":1947,"dns":0,"connect":0,"send":0,"wait":587,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokgrvjw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.650Z","timestamp":1784473457650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokgrvjw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:57 GMT\r\netag: W/\"1b-6565a685414e2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3140,"timings":{"blocked":2535,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyempin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.714Z","timestamp":1784473455714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyempin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:44:41 GMT\r\netag: W/\"1b-65533350a4e7c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohjdtrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.372Z","timestamp":1784473456372,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohjdtrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/rzcrteas/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.480Z","timestamp":1784473457480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/rzcrteas/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 15:31:14 GMT\r\netag: W/\"1b-6561b32b32bb1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6298,"timings":{"blocked":5987,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnpfqc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.421Z","timestamp":1784473458421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnpfqc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:59 GMT\r\netag: W/\"1b-65683a59e41d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icos69q4p/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.926Z","timestamp":1784473458926,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icos69q4p/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3221,"timings":{"blocked":2889,"dns":0,"connect":0,"send":0,"wait":332,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico49opj2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.056Z","timestamp":1784473459056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico49opj2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 02:13:24 GMT\r\netag: W/\"1b-656d937d68358\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4369,"timings":{"blocked":4087,"dns":0,"connect":0,"send":0,"wait":282,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoowkfsh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.068Z","timestamp":1784473459068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoowkfsh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 06:13:22 GMT\r\netag: W/\"1b-656dc92005fcb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4047,"timings":{"blocked":3466,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoymekqx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.234Z","timestamp":1784473459234,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoymekqx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoysnpjl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.977Z","timestamp":1784473455977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoysnpjl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:53 GMT\r\netag: W/\"1b-6554c707dee8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico6h6pjf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.271Z","timestamp":1784473457271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico6h6pjf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 18:22:06 GMT\r\netag: W/\"1b-655e13c3e6f86\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico7qpzyv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.311Z","timestamp":1784473457311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico7qpzyv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 11:01:33 GMT\r\netag: W/\"1b-655ef328bf5b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovvtnmg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.380Z","timestamp":1784473458380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovvtnmg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:37 GMT\r\netag: W/\"1b-65683a445c661\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokldfol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.623Z","timestamp":1784473458623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokldfol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:21 GMT\r\netag: W/\"1b-65683aa7fd456\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6753,"timings":{"blocked":6285,"dns":0,"connect":0,"send":0,"wait":468,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowe3c0o/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.357Z","timestamp":1784473455357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowe3c0o/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 13:31:40 GMT\r\netag: W/\"1b-655140326c975\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoepjjhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.796Z","timestamp":1784473455796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoepjjhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 11:39:55 GMT\r\netag: W/\"1b-6553aaf2cfa5c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1023,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocqeyrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.289Z","timestamp":1784473456289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocqeyrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:07 GMT\r\netag: W/\"1b-6559ade91e779\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoabqqos/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.730Z","timestamp":1784473456730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoabqqos/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:19 GMT\r\netag: W/\"1b-655a6c2adc0af\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqxaulz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.167Z","timestamp":1784473457167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqxaulz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:20 GMT\r\netag: W/\"1b-655be33c420ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvj579/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.482Z","timestamp":1784473457482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvj579/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 16:19:24 GMT\r\netag: W/\"1b-6561bdee9cfd6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6778,"timings":{"blocked":6333,"dns":0,"connect":0,"send":0,"wait":445,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorauacy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.589Z","timestamp":1784473457589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorauacy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 10:17:06 GMT\r\netag: W/\"1b-6563f0aee4111\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":6726,"wait":529,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobcowci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.077Z","timestamp":1784473458077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobcowci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:06 GMT\r\netag: W/\"1b-6567b8bc9acde\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5827,"timings":{"blocked":5350,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolkznmy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.515Z","timestamp":1784473458515,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolkznmy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3425,"timings":{"blocked":2822,"dns":0,"connect":0,"send":0,"wait":603,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoylqtvf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.386Z","timestamp":1784473456386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoylqtvf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:06 GMT\r\netag: W/\"1b-655a6bac2b74b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocnumrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.438Z","timestamp":1784473456438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocnumrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:23 GMT\r\netag: W/\"1b-655a6bbc60ddb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_acgfah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.747Z","timestamp":1784473457747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_acgfah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 14:27:41 GMT\r\netag: W/\"1e-6566ac6bdf5fd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomhqibm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.327Z","timestamp":1784473458327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomhqibm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:05 GMT\r\netag: W/\"1b-65683a266774d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5549,"timings":{"blocked":5189,"dns":0,"connect":0,"send":0,"wait":360,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobgakrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.697Z","timestamp":1784473458697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobgakrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 12:25:55 GMT\r\netag: W/\"1b-656914ef9614c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomsjifx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.855Z","timestamp":1784473456855,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomsjifx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:00 GMT\r\netag: W/\"1b-655be2b65eb9f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofcwtwc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.928Z","timestamp":1784473456928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofcwtwc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:32 GMT\r\netag: W/\"1b-655be2d4d1a14\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4905,"timings":{"blocked":4281,"dns":0,"connect":0,"send":0,"wait":624,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopxfije/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.663Z","timestamp":1784473457663,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopxfije/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouxhunh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.045Z","timestamp":1784473456045,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouxhunh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomokjkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.473Z","timestamp":1784473456473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomokjkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:33 GMT\r\netag: W/\"1b-655a6bc5acbf2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7378,"timings":{"blocked":6924,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohphfqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.503Z","timestamp":1784473456503,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohphfqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojpvixv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.047Z","timestamp":1784473457047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojpvixv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:28 GMT\r\netag: W/\"1b-655be30a57bf8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6778,"timings":{"blocked":6282,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotjlgdk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.975Z","timestamp":1784473457975,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotjlgdk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3744,"timings":{"blocked":3308,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowawydz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.021Z","timestamp":1784473456021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowawydz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 14:36:23 GMT\r\netag: W/\"1b-65551441833bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowjtgzp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.175Z","timestamp":1784473456175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowjtgzp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 01:00:28 GMT\r\netag: W/\"1b-6556e19cf1031\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowepivx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.161Z","timestamp":1784473457161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowepivx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:17 GMT\r\netag: W/\"1b-655be33910a92\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorhmspn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.880Z","timestamp":1784473457880,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorhmspn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3122,"timings":{"blocked":2655,"dns":0,"connect":0,"send":0,"wait":467,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoleoefa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.375Z","timestamp":1784473458375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoleoefa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:35 GMT\r\netag: W/\"1b-65683a4275182\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyjuozh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.699Z","timestamp":1784473456699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyjuozh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:03 GMT\r\netag: W/\"1b-655a6c1b44d5e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico1lcnh9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.536Z","timestamp":1784473457536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico1lcnh9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 05:58:05 GMT\r\netag: W/\"1b-656274ecc6e58\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogdwvwf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.938Z","timestamp":1784473457938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogdwvwf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:55 GMT\r\netag: W/\"1b-6567b87870a00\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6668,"timings":{"blocked":6456,"dns":0,"connect":0,"send":0,"wait":212,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosjjouz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.959Z","timestamp":1784473457959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosjjouz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:05 GMT\r\netag: W/\"1b-6567b882a7db6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowgvmdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.117Z","timestamp":1784473458117,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowgvmdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3070,"timings":{"blocked":2621,"dns":0,"connect":0,"send":0,"wait":449,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icos1rh0ub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.723Z","timestamp":1784473458723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icos1rh0ub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 01:48:34 GMT\r\netag: W/\"1b-6569c8574fb3d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojnp266/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.363Z","timestamp":1784473455363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojnp266/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 14:06:51 GMT\r\netag: W/\"1b-6551480f08fe8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconjpngj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.516Z","timestamp":1784473455516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconjpngj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 19:10:00 GMT\r\netag: W/\"1b-6552cdaeb7e14\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocuhqwn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.693Z","timestamp":1784473456693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocuhqwn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:59 GMT\r\netag: W/\"1b-655a6c1820261\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofyfewd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.192Z","timestamp":1784473457192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofyfewd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:33 GMT\r\netag: W/\"1b-655be34807b52\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoh9g2ufb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.297Z","timestamp":1784473457297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoh9g2ufb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 06:16:12 GMT\r\netag: W/\"1b-655eb36089615\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icog2007k/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.768Z","timestamp":1784473457768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icog2007k/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 20:10:43 GMT\r\netag: W/\"1b-6566f9186dd60\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoplnejj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.927Z","timestamp":1784473457927,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoplnejj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoawcxvh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.852Z","timestamp":1784473458852,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoawcxvh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1868,"timings":{"blocked":1564,"dns":0,"connect":0,"send":0,"wait":304,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojexgmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.347Z","timestamp":1784473456347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojexgmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:50 GMT\r\netag: W/\"1b-655a6b9c730bb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoigqeyf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.655Z","timestamp":1784473456655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoigqeyf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:41 GMT\r\netag: W/\"1b-655a6c0739fb2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxqu8nl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.690Z","timestamp":1784473457690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxqu8nl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 20:23:45 GMT\r\netag: W/\"1b-6565ba257d00d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6616,"timings":{"blocked":4126,"dns":0,"connect":0,"send":2093,"wait":397,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoelwjpc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.359Z","timestamp":1784473458359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoelwjpc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:25 GMT\r\netag: W/\"1b-65683a39189c5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":446,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaurbtv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.712Z","timestamp":1784473455712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaurbtv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:44:34 GMT\r\netag: W/\"1b-655333499549e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxzhcnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.496Z","timestamp":1784473456496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxzhcnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:43 GMT\r\netag: W/\"1b-655a6bcf93e68\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6218,"timings":{"blocked":5755,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomluaqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.392Z","timestamp":1784473458392,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomluaqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:42 GMT\r\netag: W/\"1b-65683a4a00bbf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovhynsz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.177Z","timestamp":1784473455177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovhynsz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 12:33:16 GMT\r\netag: W/\"1b-654d6d8c42dc9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoh7l7v2qst/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.118Z","timestamp":1784473456118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoh7l7v2qst/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 10:49:06 GMT\r\netag: W/\"1b-65562351b20d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":979,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouphfvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.129Z","timestamp":1784473457129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouphfvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:02 GMT\r\netag: W/\"1b-655be32a86fd1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6173,"timings":{"blocked":5758,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocehqry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.241Z","timestamp":1784473457241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocehqry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:34 GMT\r\netag: W/\"1b-655deb6971380\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6267,"timings":{"blocked":5891,"dns":0,"connect":0,"send":0,"wait":376,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxtwyjd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.796Z","timestamp":1784473458796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxtwyjd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 12:16:04 GMT\r\netag: W/\"1b-656a5499ebb86\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6076,"timings":{"blocked":5566,"dns":0,"connect":0,"send":0,"wait":510,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoayszhe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.577Z","timestamp":1784473455577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoayszhe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:23:34 GMT\r\netag: W/\"1b-6552eb8a52a38\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobptbif/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.650Z","timestamp":1784473455650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobptbif/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:21:31 GMT\r\netag: W/\"1b-65532e22eb2f7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoitrtrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.476Z","timestamp":1784473456476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoitrtrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:34 GMT\r\netag: W/\"1b-655a6bc737471\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoybjnmn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.745Z","timestamp":1784473456745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoybjnmn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:27 GMT\r\netag: W/\"1b-655a6c323bbc8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7247,"timings":{"blocked":6832,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotlfilw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.944Z","timestamp":1784473456944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotlfilw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:37 GMT\r\netag: W/\"1b-655be2da173c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6292,"timings":{"blocked":5910,"dns":0,"connect":0,"send":0,"wait":382,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopzzowf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.528Z","timestamp":1784473457528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopzzowf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 02:54:28 GMT\r\netag: W/\"1b-65624be20dc14\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6047,"timings":{"blocked":5632,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomzckzl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.948Z","timestamp":1784473457948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomzckzl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:02 GMT\r\netag: W/\"1b-6567b87f84259\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6537,"timings":{"blocked":5943,"dns":0,"connect":0,"send":0,"wait":594,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorhupgb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.191Z","timestamp":1784473458191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorhupgb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:01 GMT\r\netag: W/\"1b-6567b8f0e0a0e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6842,"timings":{"blocked":6431,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotyffhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.885Z","timestamp":1784473455885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotyffhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:19:52 GMT\r\netag: W/\"1b-6553f6eed38fc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico8jsxbud9ht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.129Z","timestamp":1784473456129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico8jsxbud9ht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 13:14:34 GMT\r\netag: W/\"1b-655643d5da271\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1015,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogirdpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.430Z","timestamp":1784473456430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogirdpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:20 GMT\r\netag: W/\"1b-655a6bb943fde\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoswmcve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.728Z","timestamp":1784473457728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoswmcve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:44 GMT\r\netag: W/\"1b-65664f3a0179c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7004,"timings":{"blocked":6589,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogusnor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.790Z","timestamp":1784473458790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogusnor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 10:45:44 GMT\r\netag: W/\"1b-656a406826ba3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3355,"timings":{"blocked":2950,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoobwmfz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.005Z","timestamp":1784473459005,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoobwmfz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3141,"timings":{"blocked":2536,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopigqzc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.277Z","timestamp":1784473457277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopigqzc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 00:54:20 GMT\r\netag: W/\"1b-655e6b6f95abe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoseqqxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.290Z","timestamp":1784473457290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoseqqxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:35 GMT\r\netag: W/\"1b-655e9e011f9d7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxkufwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.417Z","timestamp":1784473457417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxkufwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:28:44 GMT\r\netag: W/\"1b-656111ad58ed8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":285,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoucpype/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.836Z","timestamp":1784473457836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoucpype/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:25:54 GMT\r\netag: W/\"1b-6567b83e9af9b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3831,"timings":{"blocked":3438,"dns":0,"connect":0,"send":0,"wait":393,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoabvx6w/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.799Z","timestamp":1784473458799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoabvx6w/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 15:40:56 GMT\r\netag: W/\"1b-656a8263bd586\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5461,"timings":{"blocked":5045,"dns":0,"connect":0,"send":0,"wait":416,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyhz25t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.089Z","timestamp":1784473459089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyhz25t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 10:40:03 GMT\r\netag: W/\"1b-656e04bbcded8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6025,"timings":{"blocked":5584,"dns":0,"connect":0,"send":0,"wait":441,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouipcybwhht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.182Z","timestamp":1784473456182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouipcybwhht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 09:02:05 GMT\r\netag: W/\"1b-65574d4421e37\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoj8n846/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.757Z","timestamp":1784473456757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoj8n846/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 03:04:36 GMT\r\netag: W/\"1b-655ac2f4b33b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohyiujz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.221Z","timestamp":1784473458221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohyiujz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 18:20:37 GMT\r\netag: W/\"1b-6568225a0716e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6518,"timings":{"blocked":6083,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooqbzm2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.986Z","timestamp":1784473458986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooqbzm2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 17:37:22 GMT\r\netag: W/\"1b-656d20259116f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icospzgtp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.243Z","timestamp":1784473455243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icospzgtp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:30:21 GMT\r\netag: W/\"1b-654fe336d4cdb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoketaxd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.284Z","timestamp":1784473455284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoketaxd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 21:26:27 GMT\r\netag: W/\"1b-655068741b6b9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoajmdgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.501Z","timestamp":1784473456501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoajmdgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:46 GMT\r\netag: W/\"1b-655a6bd22cf06\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5195,"timings":{"blocked":5035,"dns":0,"connect":0,"send":0,"wait":160,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopulxay/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.070Z","timestamp":1784473457070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopulxay/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:36 GMT\r\netag: W/\"1b-655be311c6167\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5761,"timings":{"blocked":5329,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2wuynw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.310Z","timestamp":1784473457310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2wuynw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 11:00:15 GMT\r\netag: W/\"1b-655ef2de587e6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconeigaz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.762Z","timestamp":1784473457762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconeigaz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:53 GMT\r\netag: W/\"1b-6566da1058758\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3864,"timings":{"blocked":3468,"dns":0,"connect":0,"send":0,"wait":396,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosqvsfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.254Z","timestamp":1784473458254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosqvsfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:20 GMT\r\netag: W/\"1b-656839fb224fd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7017,"timings":{"blocked":6488,"dns":0,"connect":0,"send":0,"wait":529,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoasdsig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.997Z","timestamp":1784473458997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoasdsig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:34 GMT\r\netag: W/\"1b-656d512440a57\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5472,"timings":{"blocked":5040,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohkbr6y/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.013Z","timestamp":1784473459013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohkbr6y/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:33:24 GMT\r\netag: W/\"1b-656d54e77917d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5282,"timings":{"blocked":3671,"dns":0,"connect":0,"send":1148,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icob0nymy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.311Z","timestamp":1784473455311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icob0nymy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 03:10:39 GMT\r\netag: W/\"1b-6550b56357a28\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorwgdpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.958Z","timestamp":1784473456958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorwgdpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:45 GMT\r\netag: W/\"1b-655be2e1b6675\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7442,"timings":{"blocked":6901,"dns":0,"connect":0,"send":0,"wait":541,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconrzfug/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.027Z","timestamp":1784473457027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconrzfug/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:21 GMT\r\netag: W/\"1b-655be303fad86\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6779,"timings":{"blocked":6246,"dns":0,"connect":0,"send":0,"wait":533,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocyibkk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.098Z","timestamp":1784473457098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocyibkk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:45 GMT\r\netag: W/\"1b-655be31a557d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6776,"timings":{"blocked":4457,"dns":0,"connect":0,"send":1824,"wait":495,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoclsqxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.924Z","timestamp":1784473457924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoclsqxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:46 GMT\r\netag: W/\"1b-6567b8705d3e8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5375,"timings":{"blocked":4679,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozbebdk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.600Z","timestamp":1784473458600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozbebdk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:12 GMT\r\netag: W/\"1b-65683a9f0947a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5021,"timings":{"blocked":4441,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoauovwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.741Z","timestamp":1784473456741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoauovwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:24 GMT\r\netag: W/\"1b-655a6c3022a0a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohxeuvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.279Z","timestamp":1784473457279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohxeuvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 01:03:32 GMT\r\netag: W/\"1b-655e6d7d6a03a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogcqtgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.259Z","timestamp":1784473458259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogcqtgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:23 GMT\r\netag: W/\"1b-656839fe6739b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxdujhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.263Z","timestamp":1784473456263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxdujhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 22:28:31 GMT\r\netag: W/\"1b-65594361de0bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icompaqoa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.740Z","timestamp":1784473456740,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icompaqoa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2625,"timings":{"blocked":2018,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyrlodi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.328Z","timestamp":1784473456328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyrlodi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 15:13:19 GMT\r\netag: W/\"1b-655a23f8f8ca5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobewhfv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.369Z","timestamp":1784473456369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobewhfv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:00 GMT\r\netag: W/\"1b-655a6ba67b671\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojmcizk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.688Z","timestamp":1784473456688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojmcizk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:57 GMT\r\netag: W/\"1b-655a6c1610ce3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/y7bhgabh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.315Z","timestamp":1784473457315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/y7bhgabh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 13\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 17:09:27 GMT\r\netag: \"d-655f456447da6\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13,"size_decoded":317,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"335b65a2feacb44c3bfd3835e37464a0","sha1":"d81e1b06f38aaa9b6030f3d05051b1ae3d9f63c5","sha256":"ead9efd4d833099f18a43ab3a947a0ab9e2bb8aa0505334fff7feae0edeb2f2e","sha512":"80f233ff838af0edbf9f2ff63d2e7d5eb92126f0c492ba18502cf29ee0a2df2426866ffbb5f7243bb8afc4c7909a409b065a2e38227b89d3a51dced43304a4c1","ssdeep":"","tlshash":"c66000c0c0000303c0c3c03c0000c0000c0000c00c030330303003030c300c03000000","first_seen":"2026-07-07T04:06:16.7927Z","last_seen":"2026-07-20T08:33:27.428474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodgojfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.285Z","timestamp":1784473458285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodgojfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:40 GMT\r\netag: W/\"1b-65683a0ec1bf6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6448,"timings":{"blocked":6030,"dns":0,"connect":0,"send":0,"wait":418,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovsrtwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.309Z","timestamp":1784473458309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovsrtwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:56 GMT\r\netag: W/\"1b-65683a1e17870\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6996,"timings":{"blocked":6455,"dns":0,"connect":0,"send":0,"wait":541,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icod6reaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.014Z","timestamp":1784473459014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icod6reaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:29:34 GMT\r\netag: W/\"1b-656d6174b9473\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5623,"timings":{"blocked":5279,"dns":0,"connect":0,"send":0,"wait":344,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoimwofb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.030Z","timestamp":1784473456030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoimwofb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 17:16:54 GMT\r\netag: W/\"1b-6555382228543\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofqdhet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.239Z","timestamp":1784473456239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofqdhet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:46:22 GMT\r\netag: W/\"1b-6558ceac2c83f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorvuvxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.726Z","timestamp":1784473456726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorvuvxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:17 GMT\r\netag: W/\"1b-655a6c28c7d11\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyvurhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.543Z","timestamp":1784473457543,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyvurhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2446,"timings":{"blocked":1934,"dns":0,"connect":0,"send":0,"wait":512,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxixuyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.279Z","timestamp":1784473458279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxixuyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:37 GMT\r\netag: W/\"1b-65683a0b4df57\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6479,"timings":{"blocked":6034,"dns":0,"connect":0,"send":0,"wait":445,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_cyrvgx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.849Z","timestamp":1784473458849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_cyrvgx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 09:21:55 GMT\r\netag: W/\"1e-656b6f89c7456\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/presets/.css","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.300Z","timestamp":1784473459300,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /presets/.css HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopdyzeq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.270Z","timestamp":1784473455270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopdyzeq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 17:04:10 GMT\r\netag: W/\"1b-65502dd3ff5e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocz1kdd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.339Z","timestamp":1784473456339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocz1kdd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:32:47 GMT\r\netag: W/\"1b-655a5df74dfea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxzvfvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.734Z","timestamp":1784473456734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxzvfvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:20 GMT\r\netag: W/\"1b-655a6c2c6886e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokfbyyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.110Z","timestamp":1784473457110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokfbyyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:51 GMT\r\netag: W/\"1b-655be31fc6108\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobipmzv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.524Z","timestamp":1784473457524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobipmzv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 02:54:20 GMT\r\netag: W/\"1b-65624bda6aad9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6008,"timings":{"blocked":5613,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xihatb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.624Z","timestamp":1784473457624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xihatb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 04:09:16 GMT\r\netag: W/\"1b-6564e0551e507\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3895,"timings":{"blocked":3488,"dns":0,"connect":0,"send":0,"wait":407,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorpbyib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.798Z","timestamp":1784473457798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorpbyib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:08 GMT\r\netag: W/\"1b-6567956d62bc8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7220,"timings":{"blocked":6693,"dns":0,"connect":0,"send":0,"wait":527,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobjjihv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.816Z","timestamp":1784473457816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobjjihv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:12 GMT\r\netag: W/\"1b-65679977997e4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5879,"timings":{"blocked":5402,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconiqzry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.621Z","timestamp":1784473456621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconiqzry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:31 GMT\r\netag: W/\"1b-655a6bfd4df1c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconpkxnf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.850Z","timestamp":1784473456850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconpkxnf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:58 GMT\r\netag: W/\"1b-655be2b4a7463\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7286,"timings":{"blocked":6848,"dns":0,"connect":0,"send":0,"wait":438,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobjnacb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.565Z","timestamp":1784473457565,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobjnacb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorvzzyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.572Z","timestamp":1784473457572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorvzzyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 21:49:45 GMT\r\netag: W/\"1b-656349a2d71f5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6253,"timings":{"blocked":5936,"dns":0,"connect":0,"send":0,"wait":317,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkrmyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.582Z","timestamp":1784473457582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkrmyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 02:10:39 GMT\r\netag: W/\"1b-656383f3cc96c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7247,"timings":{"blocked":6718,"dns":0,"connect":0,"send":0,"wait":529,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomnyoal/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.522Z","timestamp":1784473458522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomnyoal/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:43 GMT\r\netag: W/\"1b-65683a8426786\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3536,"timings":{"blocked":3139,"dns":0,"connect":0,"send":0,"wait":397,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowfzvfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.715Z","timestamp":1784473458715,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowfzvfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/frontend-edit.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.326Z","timestamp":1784473459326,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /templates/shaper_strings/js/frontend-edit.js HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocnmnhs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.642Z","timestamp":1784473456642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocnmnhs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:37 GMT\r\netag: W/\"1b-655a6c0302e16\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoprbjur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.281Z","timestamp":1784473458281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoprbjur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:38 GMT\r\netag: W/\"1b-65683a0cb8436\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icongikgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.409Z","timestamp":1784473458409,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icongikgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:52 GMT\r\netag: W/\"1b-65683a535a49b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoixnqsp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.484Z","timestamp":1784473458484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoixnqsp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:28 GMT\r\netag: W/\"1b-65683a75b62ec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2893,"timings":{"blocked":2410,"dns":0,"connect":0,"send":0,"wait":483,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobyjrsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.416Z","timestamp":1784473457416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobyjrsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:28:44 GMT\r\netag: W/\"1b-656111aca4438\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6685,"timings":{"blocked":6185,"dns":0,"connect":0,"send":0,"wait":500,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodnvnyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.483Z","timestamp":1784473457483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodnvnyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 16:28:53 GMT\r\netag: W/\"1b-6561c00da9683\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4379,"timings":{"blocked":3874,"dns":0,"connect":0,"send":0,"wait":505,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconfwtum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.664Z","timestamp":1784473458664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconfwtum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 02:55:46 GMT\r\netag: W/\"1b-6568957f31464\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogyiqse/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.972Z","timestamp":1784473456972,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogyiqse/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoblvlpk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.740Z","timestamp":1784473457740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoblvlpk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 11:31:20 GMT\r\netag: W/\"1b-6566850135e70\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6697,"timings":{"blocked":6444,"dns":0,"connect":0,"send":0,"wait":253,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoimpczi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.416Z","timestamp":1784473458416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoimpczi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:56 GMT\r\netag: W/\"1b-65683a57443d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6987,"timings":{"blocked":6677,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqzeln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.260Z","timestamp":1784473455260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqzeln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 12:55:49 GMT\r\netag: W/\"1b-654ff650cf0e3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico4vbow6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.902Z","timestamp":1784473455902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico4vbow6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:29:27 GMT\r\netag: W/\"1b-65549a01a4713\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowyivlc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.940Z","timestamp":1784473457940,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowyivlc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolrniuh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.361Z","timestamp":1784473458361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolrniuh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:26 GMT\r\netag: W/\"1b-65683a3a5bda5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5298,"timings":{"blocked":4821,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkikhx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.207Z","timestamp":1784473455207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkikhx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 10:56:33 GMT\r\netag: W/\"1b-654e99cb7ace0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoepkpfl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.255Z","timestamp":1784473456255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoepkpfl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 16:59:00 GMT\r\netag: W/\"1b-6558f9baf16d0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomrxgkr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.259Z","timestamp":1784473456259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomrxgkr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 22:28:30 GMT\r\netag: W/\"1b-655943603c13f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":301,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovepjkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.228Z","timestamp":1784473458228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovepjkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 18:40:49 GMT\r\netag: W/\"1b-656826de7a86c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/jquery.countdown.min.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.316Z","timestamp":1784473459316,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /components/com_sppagebuilder/assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":4087,"size_decoded":1804,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4087), with no line terminators","md5":"a79aa1e6716d0ecf341c216170e1d87d","sha1":"4706a318039af36528f23a341196b4facd72a1db","sha256":"b34b1d8ba0904748b45011f05c20ae73e7d9105ebe24c828509ba9f59249b5c0","sha512":"972861efa58d26160aa5a23fae9d2b45595f1b9a33d5b8e504d052a70ef4d36d6e1c6aed669480f95e7e6822054efd44cf153865c748d62855f45a8e13808f04","ssdeep":"","tlshash":"3d8183cea37217c908d95296009e12155237f26fd4d3401cb6fdedc9a859e9e302f678","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-07-19T15:19:18.281109Z","times_seen":36,"resource_available":true,"data":null}},"time_used":2353,"timings":{"blocked":1788,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoblhctd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.975Z","timestamp":1784473455975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoblhctd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:53 GMT\r\netag: W/\"1b-6554c7078fceb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxtnvft/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.184Z","timestamp":1784473457184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxtnvft/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:28 GMT\r\netag: W/\"1b-655be343c5ddb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofyllzu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.586Z","timestamp":1784473457586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofyllzu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 06:47:45 GMT\r\netag: W/\"1b-6563c1e380fcd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":5682,"wait":416,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorcvngi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.049Z","timestamp":1784473458049,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorcvngi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohpywjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.079Z","timestamp":1784473458079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohpywjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:07 GMT\r\netag: W/\"1b-6567b8bd4d83d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolwiddy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.175Z","timestamp":1784473458175,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolwiddy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobkhfju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.328Z","timestamp":1784473458328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobkhfju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:06 GMT\r\netag: W/\"1b-65683a271066c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5653,"timings":{"blocked":5245,"dns":0,"connect":0,"send":0,"wait":408,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosurekf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.436Z","timestamp":1784473458436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosurekf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:08 GMT\r\netag: W/\"1b-65683a620df55\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5698,"timings":{"blocked":5266,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoptvlia/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.988Z","timestamp":1784473455988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoptvlia/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:51:00 GMT\r\netag: W/\"1b-6554c70ebfa66\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoodabfc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.030Z","timestamp":1784473458030,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoodabfc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:40 GMT\r\netag: W/\"1b-6567b8a3e59d5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotbgyov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.386Z","timestamp":1784473458386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotbgyov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:39 GMT\r\netag: W/\"1b-65683a46479c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolzrmnt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.114Z","timestamp":1784473459114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolzrmnt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 14:14:24 GMT\r\netag: W/\"1b-656e34a503ef2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4835,"timings":{"blocked":4531,"dns":0,"connect":0,"send":0,"wait":304,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolvljlu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.943Z","timestamp":1784473456943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolvljlu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:37 GMT\r\netag: W/\"1b-655be2d98c909\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocyhydm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.395Z","timestamp":1784473457395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocyhydm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:02:43 GMT\r\netag: W/\"1b-6560fe72fdba5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5529,"timings":{"blocked":4833,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaeyzwm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.247Z","timestamp":1784473458247,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaeyzwm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozkkycz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.104Z","timestamp":1784473459104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozkkycz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:44:42 GMT\r\netag: W/\"1b-656e2e01a4aec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3741,"timings":{"blocked":3315,"dns":0,"connect":0,"send":0,"wait":426,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofpiomo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.708Z","timestamp":1784473456708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofpiomo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:07 GMT\r\netag: W/\"1b-655a6c1ff219a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6833,"timings":{"blocked":6339,"dns":0,"connect":0,"send":0,"wait":494,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconinxpa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.153Z","timestamp":1784473457153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconinxpa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:13 GMT\r\netag: W/\"1b-655be334c319b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoizdfyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.952Z","timestamp":1784473457952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoizdfyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:04 GMT\r\netag: W/\"1b-6567b88166917\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6652,"timings":{"blocked":6206,"dns":0,"connect":0,"send":0,"wait":446,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosaqyov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.973Z","timestamp":1784473457973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosaqyov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:10 GMT\r\netag: W/\"1b-6567b886f27d1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4443,"timings":{"blocked":3987,"dns":0,"connect":0,"send":0,"wait":456,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobtnaaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.616Z","timestamp":1784473458616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobtnaaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:18 GMT\r\netag: W/\"1b-65683aa4bc438\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogkofgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.251Z","timestamp":1784473459251,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogkofgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1564,"timings":{"blocked":1123,"dns":0,"connect":0,"send":0,"wait":441,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/BDKR28_kjeykz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.308Z","timestamp":1784473456308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/BDKR28_kjeykz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 07:58:04 GMT\r\netag: W/\"1b-6559c2afa298d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":330,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoezokwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.666Z","timestamp":1784473456666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoezokwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:47 GMT\r\netag: W/\"1b-655a6c0c912ad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolbctdq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.086Z","timestamp":1784473457086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolbctdq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:40 GMT\r\netag: W/\"1b-655be31610b7e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6407,"timings":{"blocked":6097,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconeohap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.217Z","timestamp":1784473457217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconeohap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 00:39:23 GMT\r\netag: W/\"1b-655d263a6e72f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofmkclp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.619Z","timestamp":1784473458619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofmkclp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:20 GMT\r\netag: W/\"1b-65683aa6bbfb7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3916,"timings":{"blocked":3381,"dns":0,"connect":0,"send":0,"wait":535,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico1gqkzh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.351Z","timestamp":1784473455351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico1gqkzh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 11:59:57 GMT\r\netag: W/\"1b-65512bb1e496d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovlyxyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.611Z","timestamp":1784473456611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovlyxyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:27 GMT\r\netag: W/\"1b-655a6bf9303c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icottcdxr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.127Z","timestamp":1784473458127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icottcdxr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:35 GMT\r\netag: W/\"1b-6567b8d83a165\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3026,"timings":{"blocked":2447,"dns":0,"connect":0,"send":0,"wait":579,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokcuvmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.866Z","timestamp":1784473458866,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokcuvmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1825,"timings":{"blocked":1457,"dns":0,"connect":0,"send":0,"wait":368,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxiaimw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.329Z","timestamp":1784473455329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxiaimw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 07:14:35 GMT\r\netag: W/\"1b-6550ebe91fdcc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogfamyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.002Z","timestamp":1784473456002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogfamyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 10:17:26 GMT\r\netag: W/\"1b-6554da608211c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":927,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolbiggb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.233Z","timestamp":1784473458233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolbiggb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:06 GMT\r\netag: W/\"1b-656839ee03ea1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4296,"timings":{"blocked":3705,"dns":0,"connect":0,"send":0,"wait":591,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeaxtqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.339Z","timestamp":1784473458339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeaxtqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:13 GMT\r\netag: W/\"1b-65683a2df124a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5733,"timings":{"blocked":5316,"dns":0,"connect":0,"send":0,"wait":417,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovacway/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.661Z","timestamp":1784473458661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovacway/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 02:29:29 GMT\r\netag: W/\"1b-65688f9f8ea58\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/common.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.308Z","timestamp":1784473459308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/js/common.js HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 133\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: \"90-6346cfe76f42c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":144,"size_decoded":505,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"1cf43dea515211d749846b740f8ad105","sha1":"1d4d15015be5cfd6f9ba486b32469f2e15cb0566","sha256":"f2d3f29f2933cbfcd97d2e63d9ac567613bb88fc168de3b8fa796d9dea27ec7d","sha512":"3f32426c7f44a67be9e8e659be416baa9066587620c79b1a818d13df07e0b1a021ac170e1de0db5a9e840812ea32bf034b70940679477b4b1371b9d92ab1c210","ssdeep":"","tlshash":"e7c08c31430204b601298c86217dff4136bba122b14184021666480ac896a4311b38cf","first_seen":"2023-12-03T12:25:18Z","last_seen":"2026-07-21T15:37:03.123514Z","times_seen":1058,"resource_available":true,"data":null}},"time_used":6236,"timings":{"blocked":5900,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoi1z40z/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.919Z","timestamp":1784473455919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoi1z40z/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:32:59 GMT\r\netag: W/\"1b-65549acc39b96\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodbwekg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.249Z","timestamp":1784473456249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodbwekg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 14:06:06 GMT\r\netag: W/\"1b-6558d314dec68\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icou8s8c5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.757Z","timestamp":1784473456757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icou8s8c5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 03:03:27 GMT\r\netag: W/\"1b-655ac2b359c28\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoppdxex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.285Z","timestamp":1784473457285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoppdxex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:34 GMT\r\netag: W/\"1b-655e9e0084577\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7209,"timings":{"blocked":6752,"dns":0,"connect":0,"send":0,"wait":457,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorzzvci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.553Z","timestamp":1784473457553,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorzzvci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoolfukk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.960Z","timestamp":1784473457960,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoolfukk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoigbrey/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.118Z","timestamp":1784473458118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoigbrey/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:30 GMT\r\netag: W/\"1b-6567b8d33db89\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojedwxh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.168Z","timestamp":1784473458168,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojedwxh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconczcgf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.305Z","timestamp":1784473455305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconczcgf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 02:31:49 GMT\r\netag: W/\"1b-6550acb50b05e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowjjawb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.876Z","timestamp":1784473455876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowjjawb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:19:21 GMT\r\netag: W/\"1b-6553f6d14df28\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogedzvc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.353Z","timestamp":1784473456353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogedzvc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:52 GMT\r\netag: W/\"1b-655a6b9e5a599\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorpdryf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.940Z","timestamp":1784473456940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorpdryf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:35 GMT\r\netag: W/\"1b-655be2d7b7d0d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6889,"timings":{"blocked":6451,"dns":0,"connect":0,"send":0,"wait":438,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoozknhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.291Z","timestamp":1784473457291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoozknhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:35 GMT\r\netag: W/\"1b-655e9e01564d6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomfkw1f/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.529Z","timestamp":1784473457529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomfkw1f/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 03:03:48 GMT\r\netag: W/\"1b-65624df804026\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7104,"timings":{"blocked":6649,"dns":0,"connect":0,"send":0,"wait":455,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouamxyw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.764Z","timestamp":1784473457764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouamxyw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:54 GMT\r\netag: W/\"1b-6566da1139117\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5164,"timings":{"blocked":4714,"dns":0,"connect":0,"send":0,"wait":450,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobtrfkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.128Z","timestamp":1784473458128,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobtrfkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoslaift/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.748Z","timestamp":1784473455748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoslaift/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:54:52 GMT\r\netag: W/\"1b-65535069430eb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico1yn1xd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.031Z","timestamp":1784473456031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico1yn1xd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 17:38:41 GMT\r\netag: W/\"1b-65553d00d2b10\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouhbpir/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.378Z","timestamp":1784473456378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouhbpir/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:03 GMT\r\netag: W/\"1b-655a6ba91088e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouiqslg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.449Z","timestamp":1784473457449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouiqslg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:24:50 GMT\r\netag: W/\"1b-65618980fa594\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_ebnfcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.634Z","timestamp":1784473457634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_ebnfcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 13:51:22 GMT\r\netag: W/\"1e-65656270c2d48\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6256,"timings":{"blocked":5913,"dns":0,"connect":0,"send":0,"wait":343,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofieakw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.699Z","timestamp":1784473457699,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofieakw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3167,"timings":{"blocked":2597,"dns":0,"connect":0,"send":0,"wait":570,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokwraon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.753Z","timestamp":1784473457753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokwraon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:50:58 GMT\r\netag: W/\"1b-6566d9dbf74a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5904,"timings":{"blocked":5551,"dns":0,"connect":0,"send":0,"wait":353,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoagcfeh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.807Z","timestamp":1784473457807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoagcfeh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:11 GMT\r\netag: W/\"1b-65679570411c6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6558,"timings":{"blocked":5965,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojdqyax/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.557Z","timestamp":1784473455557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojdqyax/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:48 GMT\r\netag: W/\"1b-6552e95b144b8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconjvqov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.945Z","timestamp":1784473456945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconjvqov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:38 GMT\r\netag: W/\"1b-655be2dab1886\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4075,"timings":{"blocked":3678,"dns":0,"connect":0,"send":0,"wait":397,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocptuaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.156Z","timestamp":1784473457156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocptuaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:14 GMT\r\netag: W/\"1b-655be3365f357\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoalfbhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.805Z","timestamp":1784473457805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoalfbhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:11 GMT\r\netag: W/\"1b-6567957023d07\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4855,"timings":{"blocked":4698,"dns":0,"connect":0,"send":0,"wait":157,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogdqlfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.808Z","timestamp":1784473457808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogdqlfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:11 GMT\r\netag: W/\"1b-6567957052b06\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6533,"timings":{"blocked":5956,"dns":0,"connect":0,"send":0,"wait":577,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoercoxs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.846Z","timestamp":1784473457846,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoercoxs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotkapyv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.115Z","timestamp":1784473458115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotkapyv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:28 GMT\r\netag: W/\"1b-6567b8d16aecb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6943,"timings":{"blocked":6485,"dns":0,"connect":0,"send":0,"wait":458,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodpogif/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.333Z","timestamp":1784473458333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodpogif/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:09 GMT\r\netag: W/\"1b-65683a29f984b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4449,"timings":{"blocked":3867,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoluyshj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.195Z","timestamp":1784473455195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoluyshj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 06:17:45 GMT\r\netag: W/\"1b-654e5b7a102b8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopuv3ef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.211Z","timestamp":1784473456211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopuv3ef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 19:47:38 GMT\r\netag: W/\"1b-6557dd8e4fdbe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokxwlaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.816Z","timestamp":1784473456816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokxwlaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 18:14:36 GMT\r\netag: W/\"1b-655b8e5b1a541\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xnoglz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.621Z","timestamp":1784473457621,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xnoglz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3807,"timings":{"blocked":76,"dns":0,"connect":0,"send":3350,"wait":381,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojmbdly/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.686Z","timestamp":1784473457686,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojmbdly/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoybnmbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.918Z","timestamp":1784473457918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoybnmbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:42 GMT\r\netag: W/\"1b-6567b86c86d2c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6730,"timings":{"blocked":6512,"dns":0,"connect":0,"send":0,"wait":218,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopkqhvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.190Z","timestamp":1784473458190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopkqhvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:00 GMT\r\netag: W/\"1b-6567b8f04848f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5500,"timings":{"blocked":5189,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogipvij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.471Z","timestamp":1784473458471,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogipvij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokhvzfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.334Z","timestamp":1784473455334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokhvzfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 08:41:12 GMT\r\netag: W/\"1b-6550ff45093f9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorbzoyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.158Z","timestamp":1784473457158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorbzoyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:15 GMT\r\netag: W/\"1b-655be337719f5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokyunnx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.179Z","timestamp":1784473457179,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokyunnx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2579,"timings":{"blocked":2064,"dns":0,"connect":0,"send":0,"wait":515,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouwfukxb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.258Z","timestamp":1784473457258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouwfukxb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:01:53 GMT\r\netag: W/\"1b-655e01d5ae492\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqqyju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.945Z","timestamp":1784473457945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqqyju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:00 GMT\r\netag: W/\"1b-6567b87d7ba3b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6805,"timings":{"blocked":6513,"dns":0,"connect":0,"send":0,"wait":292,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icownohzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.058Z","timestamp":1784473458058,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icownohzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozesfdw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.511Z","timestamp":1784473458511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozesfdw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:38 GMT\r\netag: W/\"1b-65683a7f272c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovrsjql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.871Z","timestamp":1784473458871,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovrsjql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1852,"timings":{"blocked":1242,"dns":0,"connect":0,"send":0,"wait":610,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotkjmeb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.354Z","timestamp":1784473455354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotkjmeb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 12:28:54 GMT\r\netag: W/\"1b-6551322a2f1d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomwpnqu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.921Z","timestamp":1784473455921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomwpnqu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:33:00 GMT\r\netag: W/\"1b-65549accbb9b6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoehdmlj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.922Z","timestamp":1784473457922,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoehdmlj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyhvmvv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.559Z","timestamp":1784473458559,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyhvmvv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1987,"timings":{"blocked":1521,"dns":0,"connect":0,"send":0,"wait":466,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoenjmdu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.153Z","timestamp":1784473459153,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoenjmdu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1618,"timings":{"blocked":1180,"dns":0,"connect":0,"send":0,"wait":438,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xcqufj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.169Z","timestamp":1784473459169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xcqufj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 01:54:50 GMT\r\netag: W/\"1b-656ed1343cbbd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocnqyru/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.263Z","timestamp":1784473459263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocnqyru/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 08:07:57 GMT\r\netag: W/\"1b-656f249a0c52b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3576,"timings":{"blocked":3103,"dns":0,"connect":0,"send":0,"wait":473,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovaeixc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.677Z","timestamp":1784473455677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovaeixc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:42:36 GMT\r\netag: W/\"1b-655332d8ac068\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorzignu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.782Z","timestamp":1784473455782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorzignu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 08:03:05 GMT\r\netag: W/\"1b-65537a7bbdcf8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyarqhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.261Z","timestamp":1784473456261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyarqhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 22:28:31 GMT\r\netag: W/\"1b-65594361535fd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaatabk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.273Z","timestamp":1784473457273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaatabk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 18:54:21 GMT\r\netag: W/\"1b-655e1af89fb3f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqhxtgs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.360Z","timestamp":1784473457360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqhxtgs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 04:18:50 GMT\r\netag: W/\"1b-655fdb01f4170\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoinhxon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.777Z","timestamp":1784473457777,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoinhxon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3141,"timings":{"blocked":2576,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohqkoqn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.825Z","timestamp":1784473457825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohqkoqn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:16 GMT\r\netag: W/\"1b-6567997b75c65\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6065,"timings":{"blocked":5688,"dns":0,"connect":0,"send":0,"wait":377,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohkuesv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.930Z","timestamp":1784473457930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohkuesv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:49 GMT\r\netag: W/\"1b-6567b873705a5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6941,"timings":{"blocked":6538,"dns":0,"connect":0,"send":0,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/css/animate.min.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.161Z","timestamp":1784473455161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/css/animate.min.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: W/\"68195cae-11508\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70920,"size_decoded":4763,"mime_type":"text/css","magic":"ASCII text, with very long lines (65352)","md5":"5c2ec5de20ab5077c5e8ce214e06dce0","sha1":"2a012e88ac3df586c036a9b56d97c665759e409a","sha256":"a50f04537386196945dfab2e93729fbec5238b70a581fa07d826c0d7b0ffebe2","sha512":"48e44583d92a45d31aa8873f28ac3e821ab33a0bb67a579ee31f81532d9ef6a39dd94b4e0b7264cf72168a513b25e44d60d2ecb3275ce60775bff0861c3681a3","ssdeep":"768:8kZDINI4bTgM6X69SpiCo1o3Pqw61KAZkWDL3uyk5BrceS0qTIsFsV:8kZLPqw61KAZkWDL3uyk5BrceS0qTc","tlshash":"2563f7ae4891128991274fa6c7dc4ea4473dc67354620cee33462c4b8f87fae33da657","first_seen":"2024-01-04T03:06:48Z","last_seen":"2026-07-21T15:37:03.161919Z","times_seen":1131,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohepvnw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.665Z","timestamp":1784473455665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohepvnw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:22:29 GMT\r\netag: W/\"1b-65532e59e75d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxifqgl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.549Z","timestamp":1784473456549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxifqgl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:06 GMT\r\netag: W/\"1b-655a6be55b173\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiecztx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.114Z","timestamp":1784473457114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiecztx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:52 GMT\r\netag: W/\"1b-655be321a39a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":623,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiwtwtl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.583Z","timestamp":1784473458583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiwtwtl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:08 GMT\r\netag: W/\"1b-65683a9bc845c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5703,"timings":{"blocked":3891,"dns":0,"connect":0,"send":1361,"wait":451,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqcqxpl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.865Z","timestamp":1784473458865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqcqxpl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 12:02:29 GMT\r\netag: W/\"1b-656b936e223a9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3541,"timings":{"blocked":3199,"dns":0,"connect":0,"send":0,"wait":342,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobecees/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.001Z","timestamp":1784473459001,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobecees/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1629,"timings":{"blocked":892,"dns":0,"connect":0,"send":0,"wait":737,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozupvfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.021Z","timestamp":1784473459021,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozupvfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyivnsx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.538Z","timestamp":1784473455538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyivnsx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 20:51:54 GMT\r\netag: W/\"1b-6552e475e0c18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodevbxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.637Z","timestamp":1784473455637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodevbxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:20:54 GMT\r\netag: W/\"1b-65532dff2ebde\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowxarcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.160Z","timestamp":1784473456160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowxarcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:41 GMT\r\netag: W/\"1b-6556c62b660bb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":962,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconxmxau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.893Z","timestamp":1784473457893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconxmxau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:27 GMT\r\netag: W/\"1b-6567b85dd51ba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6203,"timings":{"blocked":5858,"dns":0,"connect":0,"send":0,"wait":345,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoejevlv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.525Z","timestamp":1784473458525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoejevlv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:45 GMT\r\netag: W/\"1b-65683a856ab06\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5854,"timings":{"blocked":5545,"dns":0,"connect":0,"send":0,"wait":309,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconwpoxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.593Z","timestamp":1784473456593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconwpoxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:20 GMT\r\netag: W/\"1b-655a6bf2f67c6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icociyvlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.892Z","timestamp":1784473457892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icociyvlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:26 GMT\r\netag: W/\"1b-6567b85d17a7b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4653,"timings":{"blocked":4070,"dns":0,"connect":0,"send":0,"wait":583,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xfpivs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.777Z","timestamp":1784473458777,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xfpivs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3268,"timings":{"blocked":2832,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozgbpld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.138Z","timestamp":1784473459138,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozgbpld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2469,"timings":{"blocked":1901,"dns":0,"connect":0,"send":0,"wait":568,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xzvejt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.611Z","timestamp":1784473457611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xzvejt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 00:24:55 GMT\r\netag: W/\"1b-6564ae2f5687f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4350,"timings":{"blocked":57,"dns":0,"connect":0,"send":3758,"wait":535,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorwybkv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.869Z","timestamp":1784473457869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorwybkv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:13 GMT\r\netag: W/\"1b-6567b8507d188\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4957,"timings":{"blocked":4680,"dns":0,"connect":0,"send":0,"wait":277,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocuioqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.474Z","timestamp":1784473458474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocuioqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:24 GMT\r\netag: W/\"1b-65683a71adf4e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5675,"timings":{"blocked":5224,"dns":0,"connect":0,"send":0,"wait":451,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconmvpbr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.746Z","timestamp":1784473458746,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconmvpbr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 04:58:55 GMT\r\netag: W/\"1b-6569f2e3adaae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooljdhk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.920Z","timestamp":1784473458920,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooljdhk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/addons/text_block.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.314Z","timestamp":1784473459314,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /components/com_sppagebuilder/assets/js/addons/text_block.js HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 299\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: \"2b2-6346cfe76e48c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorzayhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.642Z","timestamp":1784473455642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorzayhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:21:03 GMT\r\netag: W/\"1b-65532e0820c84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomuvbhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.982Z","timestamp":1784473456982,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomuvbhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoltgwjs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.247Z","timestamp":1784473457247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoltgwjs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:42 GMT\r\netag: W/\"1b-655deb707617b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_vdokgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.604Z","timestamp":1784473457604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_vdokgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 23:02:39 GMT\r\netag: W/\"1e-65649bcc46a8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovouven/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.023Z","timestamp":1784473459023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovouven/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:39 GMT\r\netag: W/\"1b-656d6710d0038\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5954,"timings":{"blocked":5364,"dns":0,"connect":0,"send":0,"wait":590,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoek30u7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.159Z","timestamp":1784473459159,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoek30u7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 22:37:06 GMT\r\netag: W/\"1b-656ea501b4ea8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/css/bootstrap.min.css","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.292Z","timestamp":1784473459292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /templates/shaper_strings/css/bootstrap.min.css HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: W/\"67096c5b-27ff3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163827,"size_decoded":21037,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"4fbde7bde74198d22a6ca959de898d77","sha1":"3926a5f4e4a6af9118cce798af69b912a987ed66","sha256":"eb196c213110de8211f81fd00b629578ac511d6451e0a5901976ae61262788cd","sha512":"49ca5289ab8f45bbb6cc6b376f9e8a3f29bd70a38c96dda50fe16e76c2d6f0493c8a2dafccb31a209b7e8ab1f5e34c65fc453b8afb03e374b346be7ed89600cf","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fT:4t04/0VUpz600I4fT","tlshash":"dff3b4d7f581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-08T01:54:46Z","last_seen":"2026-07-20T20:46:30.519842Z","times_seen":1739,"resource_available":false,"data":null}},"time_used":3876,"timings":{"blocked":3328,"dns":0,"connect":0,"send":0,"wait":548,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopucpbn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.944Z","timestamp":1784473455944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopucpbn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:40 GMT\r\netag: W/\"1b-6554c6fbe57b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohunekj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.998Z","timestamp":1784473456998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohunekj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:06 GMT\r\netag: W/\"1b-655be2f506ba8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5228,"timings":{"blocked":4918,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoacjkpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.321Z","timestamp":1784473458321,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoacjkpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2059,"timings":{"blocked":1633,"dns":0,"connect":0,"send":0,"wait":426,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico0kgn47/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.471Z","timestamp":1784473455471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico0kgn47/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 17:02:27 GMT\r\netag: W/\"1b-6552b12d1f87f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozljqha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.690Z","timestamp":1784473455690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozljqha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:43:15 GMT\r\netag: W/\"1b-655332fe1b07b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouirvvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.185Z","timestamp":1784473456185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouirvvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 10:45:35 GMT\r\netag: W/\"1b-6557646626249\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":940,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorjupsd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.497Z","timestamp":1784473456497,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorjupsd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:44 GMT\r\netag: W/\"1b-655a6bd018b68\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolhsmrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.159Z","timestamp":1784473458159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolhsmrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:48 GMT\r\netag: W/\"1b-6567b8e48c619\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5501,"timings":{"blocked":5157,"dns":0,"connect":0,"send":0,"wait":344,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_kymkop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.110Z","timestamp":1784473459110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_kymkop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:46:51 GMT\r\netag: W/\"1e-656e2e7cbb705\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoknxypr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.755Z","timestamp":1784473455755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoknxypr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:55:21 GMT\r\netag: W/\"1b-6553508594139\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoicavgn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.108Z","timestamp":1784473456108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoicavgn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 03:27:10 GMT\r\netag: W/\"1b-6555c08a8d26b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotfyexm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.897Z","timestamp":1784473456897,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotfyexm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3379,"timings":{"blocked":2824,"dns":0,"connect":0,"send":0,"wait":555,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconhouyt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.183Z","timestamp":1784473458183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconhouyt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:58 GMT\r\netag: W/\"1b-6567b8edcd851\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2940,"timings":{"blocked":2458,"dns":0,"connect":0,"send":0,"wait":482,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotytinh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.889Z","timestamp":1784473458889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotytinh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:57:37 GMT\r\netag: W/\"25-656bd5657df96\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":328,"mime_type":"text/css","magic":"ASCII text","md5":"2126f828ff82757f3b699ff16a8e2013","sha1":"8c6c56cc6cea94365883211a6f43374babd73566","sha256":"15c85e384329b5c2e0b26be14d3b7819bf01a1825c4bddc788893acf0ac3ac02","sha512":"fd6d51b3602ab9f0f80ffd9c358e9bdb18351bb1b0f3e258ad497e9365a5f40eb705e264d693f642cd01f66db51773ff22ff1b3174e4e63df950e5c60dc76e55","ssdeep":"","tlshash":"8d800002008e0038e2ba2e23b00f3032a23cb80a80fe803220080acc8ec3c3023c23a8","first_seen":"2026-07-19T15:05:15.468442Z","last_seen":"2026-07-19T15:05:15.468442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5359,"timings":{"blocked":3752,"dns":0,"connect":0,"send":1187,"wait":420,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokzrqvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.374Z","timestamp":1784473456374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokzrqvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:02 GMT\r\netag: W/\"1b-655a6ba88dacf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogpsmkc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.602Z","timestamp":1784473458602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogpsmkc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:12 GMT\r\netag: W/\"1b-65683a9fa587a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6503,"timings":{"blocked":3798,"dns":0,"connect":0,"send":2381,"wait":324,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico9ea253/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.725Z","timestamp":1784473455725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico9ea253/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:35:06 GMT\r\netag: W/\"1b-65534bfe038ec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodakzgw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.085Z","timestamp":1784473456085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodakzgw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:35:50 GMT\r\netag: W/\"1b-65558cd527d01\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokpsvwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.665Z","timestamp":1784473456665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokpsvwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:47 GMT\r\netag: W/\"1b-655a6c0c0b60d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolwqbao/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.001Z","timestamp":1784473458001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolwqbao/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:25 GMT\r\netag: W/\"1b-6567b895457a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocvbrlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.657Z","timestamp":1784473458657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocvbrlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 01:45:25 GMT\r\netag: W/\"1b-656885c640416\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5777,"timings":{"blocked":5466,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojuisvh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.504Z","timestamp":1784473457504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojuisvh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:10:19 GMT\r\netag: W/\"1b-6561fef4fe7e7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomekfqg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.974Z","timestamp":1784473458974,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomekfqg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoe525a4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.257Z","timestamp":1784473455257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoe525a4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:57:27 GMT\r\netag: W/\"21-654fe945a2849\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":33,"size_decoded":324,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"4e9bec57e4fc9e941e7a420ec4937049","sha1":"548690260c17c3bdfedfcb20139b86701e01f2d9","sha256":"3756c60a8138b61fd9f563a75b115b2a75a66baae448f5f4483fbf5af354aa0f","sha512":"ac6444ac5006e6fe09362dd72a36bc60eb8583b77959728a41aec50588ffab7db92b1c743d7ea06e9e9a482de80576cd14fa5aaa840af25a0311e50c74db6792","ssdeep":"","tlshash":"df8000b0c008b8c203a2e0028b20ab2f0082b028c28a3c22e00a000c08c02803ea0eac","first_seen":"2026-07-19T15:05:15.470389Z","last_seen":"2026-07-19T15:05:15.470389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofcgyfh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.113Z","timestamp":1784473458113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofcgyfh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:26 GMT\r\netag: W/\"1b-6567b8d027aec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4928,"timings":{"blocked":4617,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqsqzjg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.498Z","timestamp":1784473458498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqsqzjg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:31 GMT\r\netag: W/\"1b-65683a787f12b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4896,"timings":{"blocked":4396,"dns":0,"connect":0,"send":0,"wait":500,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xblkjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.738Z","timestamp":1784473458738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xblkjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:33:06 GMT\r\netag: W/\"1b-6569d24bd1792\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5212,"timings":{"blocked":4922,"dns":0,"connect":0,"send":0,"wait":290,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoocnmut/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.200Z","timestamp":1784473458200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoocnmut/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:06 GMT\r\netag: W/\"1b-6567b8f651349\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6024,"timings":{"blocked":5707,"dns":0,"connect":0,"send":0,"wait":317,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomqjscy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.689Z","timestamp":1784473455689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomqjscy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:43:05 GMT\r\netag: W/\"1b-655332f4a90fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoynmdji/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.506Z","timestamp":1784473456506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoynmdji/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:47 GMT\r\netag: W/\"1b-655a6bd3b7784\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoauoenp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.520Z","timestamp":1784473457520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoauoenp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 00:11:06 GMT\r\netag: W/\"1b-6562275ded947\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4545,"timings":{"blocked":4083,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosazfah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.812Z","timestamp":1784473458812,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosazfah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1870,"timings":{"blocked":1509,"dns":0,"connect":0,"send":0,"wait":361,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolhbged/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.930Z","timestamp":1784473458930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolhbged/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 06:30:41 GMT\r\netag: W/\"1b-656c8b217ef93\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6091,"timings":{"blocked":5624,"dns":0,"connect":0,"send":0,"wait":467,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyxrlnd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.928Z","timestamp":1784473455928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyxrlnd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:37 GMT\r\netag: W/\"1b-6554c6f87e635\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomatork/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.869Z","timestamp":1784473456869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomatork/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:07 GMT\r\netag: W/\"1b-655be2bcbe8ef\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1166,"timings":{"blocked":670,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotvtqlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.897Z","timestamp":1784473457897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotvtqlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:30 GMT\r\netag: W/\"1b-6567b860a7c38\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5862,"timings":{"blocked":5399,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/main.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.322Z","timestamp":1784473459322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /templates/shaper_strings/js/main.js HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: W/\"67096c5b-1d40\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7488,"size_decoded":2023,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9193f6023469655c6b8231796e33cc25","sha1":"e489a6f80efa28475a60843b134744e1e5549c31","sha256":"a77b98866af1c51a5b8001d8b69b385bcf65716404f45a223771040e294f281e","sha512":"403836bc38afcfeb2596cf7267908a06d517cde706626bba8599fb4bb7b55a1db2347c0c73ef651d2159ff098b15799adbd2891e66e90c2b665bff8e8c6d12d3","ssdeep":"96:P7Pk30Hl0DCGHoCgHZoDVgbHk6ggH6Pfqy0PclXGvD4IgbX5YNGCgqy2qZa:Pz80F0DFoV5o5si63ckvDsX5YN9pyDZa","tlshash":"d7f13164f3ac1ed3057e616a041e84c8a33e107697420c66e87dba6c6cbdb3d23b2d1d","first_seen":"2026-07-19T15:05:15.472226Z","last_seen":"2026-07-19T15:19:18.249488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3489,"timings":{"blocked":2986,"dns":0,"connect":0,"send":0,"wait":503,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoexupue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.989Z","timestamp":1784473455989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoexupue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:51:03 GMT\r\netag: W/\"1b-6554c71136824\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogvakcn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.251Z","timestamp":1784473457251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogvakcn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 16:04:39 GMT\r\netag: W/\"1b-655df50ab512b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/dvkwtnsn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.638Z","timestamp":1784473457638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/dvkwtnsn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 14:32:20 GMT\r\netag: W/\"1b-65656b99091f0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6712,"timings":{"blocked":6453,"dns":0,"connect":0,"send":0,"wait":259,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icornwxoj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.178Z","timestamp":1784473459178,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icornwxoj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowgfpar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.229Z","timestamp":1784473455229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowgfpar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 18:03:19 GMT\r\netag: W/\"1b-654ef92f1ddf3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico0e47e0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.252Z","timestamp":1784473455252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico0e47e0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:57:26 GMT\r\netag: W/\"21-654fe94484629\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":325,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"1c4ee38ddec255bbd97c7ba7a0aebec5","sha1":"fb44041d57da330ffa0799dfb8fff3c81b511def","sha256":"2738463707fe64a4788eb16741c0be8ae4e374e6310ddb6c51e9a1a4decb4cdc","sha512":"fe188f13e653931a87864a260c66fa136ade3b3e7c51ccb213de08c867e76b3fbd5cfe2650c9fafd4c2b2d2c4c7bf9ac1cbd78b6f4dadde0479f5e655f537509","ssdeep":"","tlshash":"798000a0c02ab0c22bb8c00283002a2e3030b22cf2883822ec2a000c8cc03000ec0eac","first_seen":"2026-07-19T15:05:15.474195Z","last_seen":"2026-07-19T15:05:15.474195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozviiwy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.156Z","timestamp":1784473456156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozviiwy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:38 GMT\r\netag: W/\"1b-6556c62883c3c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoygqqhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.740Z","timestamp":1784473458740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoygqqhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 03:08:53 GMT\r\netag: W/\"1b-6569da4b9b9ff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4573,"timings":{"blocked":4219,"dns":0,"connect":0,"send":0,"wait":354,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoc9bcnq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.811Z","timestamp":1784473458811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoc9bcnq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 20:38:24 GMT\r\netag: W/\"1b-656ac4e0cfbbf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2783,"timings":{"blocked":2330,"dns":0,"connect":0,"send":0,"wait":453,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotvwppv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.872Z","timestamp":1784473456872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotvwppv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:08 GMT\r\netag: W/\"1b-655be2be6568b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozrkmff/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.913Z","timestamp":1784473456913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozrkmff/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:24 GMT\r\netag: W/\"1b-655be2cd123c7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozpa2uj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.208Z","timestamp":1784473457208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozpa2uj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 22:38:06 GMT\r\netag: W/\"1b-655d0b1ede2e7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokhtle2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.803Z","timestamp":1784473458803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokhtle2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 15:40:57 GMT\r\netag: W/\"1b-656a82652d824\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5042,"timings":{"blocked":4694,"dns":0,"connect":0,"send":0,"wait":348,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofqyxxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.020Z","timestamp":1784473459020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofqyxxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:38 GMT\r\netag: W/\"1b-656d670fd603a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2595,"timings":{"blocked":2123,"dns":0,"connect":0,"send":0,"wait":472,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobjyogq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.672Z","timestamp":1784473456672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobjyogq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:49 GMT\r\netag: W/\"1b-655a6c0eb11cb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoriqizk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.720Z","timestamp":1784473456720,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoriqizk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4038,"timings":{"blocked":3603,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2wlkkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.047Z","timestamp":1784473459047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2wlkkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 01:33:34 GMT\r\netag: W/\"1b-656d8a955d0e0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6065,"timings":{"blocked":5626,"dns":0,"connect":0,"send":0,"wait":439,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobdzhts/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.288Z","timestamp":1784473459288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobdzhts/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 14:31:43 GMT\r\netag: W/\"1b-656f7a6161d2a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaxghtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.298Z","timestamp":1784473455298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaxghtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 01:34:56 GMT\r\netag: W/\"1b-65509ffea257b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokmwxvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.055Z","timestamp":1784473457055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokmwxvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:31 GMT\r\netag: W/\"1b-655be30d025d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5225,"timings":{"blocked":4914,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgcscn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.544Z","timestamp":1784473458544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgcscn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:50 GMT\r\netag: W/\"1b-65683a8a864e3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5302,"timings":{"blocked":4953,"dns":0,"connect":0,"send":0,"wait":349,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofwryue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.725Z","timestamp":1784473458725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofwryue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:20:27 GMT\r\netag: W/\"1b-6569cf7861568\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5403,"timings":{"blocked":3793,"dns":0,"connect":0,"send":1169,"wait":441,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojirqza/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.380Z","timestamp":1784473456380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojirqza/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:04 GMT\r\netag: W/\"1b-655a6baa192ed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodmbnyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.599Z","timestamp":1784473456599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodmbnyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:22 GMT\r\netag: W/\"1b-655a6bf508c24\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodygyhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.361Z","timestamp":1784473457361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodygyhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 04:31:51 GMT\r\netag: W/\"1b-655fddeb17c48\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoerhkup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.889Z","timestamp":1784473457889,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoerhkup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohvhhvb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.607Z","timestamp":1784473456607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohvhhvb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:26 GMT\r\netag: W/\"1b-655a6bf8a4960\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobuvvwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.882Z","timestamp":1784473458882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobuvvwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:12:08 GMT\r\netag: W/\"1b-656bcb3a80ad6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6712,"timings":{"blocked":6307,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoztnfcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.238Z","timestamp":1784473459238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoztnfcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:19 GMT\r\netag: W/\"1b-656f1d158048b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvovhx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.357Z","timestamp":1784473456357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvovhx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:54 GMT\r\netag: W/\"1b-655a6ba0f74b6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofuylsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.676Z","timestamp":1784473456676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofuylsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:52 GMT\r\netag: W/\"1b-655a6c10c45c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodxckxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.250Z","timestamp":1784473457250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodxckxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:47 GMT\r\netag: W/\"1b-655deb75eb8d7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyqnieq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.388Z","timestamp":1784473457388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyqnieq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 01:58:58 GMT\r\netag: W/\"1b-6560fd9c103fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaqxpip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.550Z","timestamp":1784473458550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaqxpip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:52 GMT\r\netag: W/\"1b-65683a8c65cc3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5857,"timings":{"blocked":5546,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogjrwzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.226Z","timestamp":1784473459226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogjrwzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:13 GMT\r\netag: W/\"1b-656f1d0fe8a50\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4678,"timings":{"blocked":3981,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopijgor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.338Z","timestamp":1784473455338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopijgor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 08:41:14 GMT\r\netag: W/\"1b-6550ff4734e98\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogxrezk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.659Z","timestamp":1784473457659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogxrezk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:56:01 GMT\r\netag: W/\"1b-6565a68873a9f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqlvzxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.124Z","timestamp":1784473458124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqlvzxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:33 GMT\r\netag: W/\"1b-6567b8d666506\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocoobkz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.349Z","timestamp":1784473458349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocoobkz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:19 GMT\r\netag: W/\"1b-65683a33c5547\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4065,"timings":{"blocked":3541,"dns":0,"connect":0,"send":0,"wait":524,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqsxpnr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.810Z","timestamp":1784473458810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqsxpnr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 20:33:39 GMT\r\netag: W/\"1b-656ac3d16f161\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5396,"timings":{"blocked":5041,"dns":0,"connect":0,"send":0,"wait":355,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogkndij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.838Z","timestamp":1784473456838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogkndij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:49 GMT\r\netag: W/\"1b-655be2abe6119\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iubcwmxb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.749Z","timestamp":1784473457749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iubcwmxb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 15:31:57 GMT\r\netag: W/\"1b-6566bac9c9141\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5985,"timings":{"blocked":4306,"dns":0,"connect":0,"send":1200,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/gh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.781Z","timestamp":1784473458781,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/gh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoifsnhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.401Z","timestamp":1784473456401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoifsnhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:11 GMT\r\netag: W/\"1b-655a6bb0ee346\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoptgilf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.889Z","timestamp":1784473456889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoptgilf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:14 GMT\r\netag: W/\"1b-655be2c3d30de\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6118,"timings":{"blocked":5642,"dns":0,"connect":0,"send":0,"wait":476,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoteacmh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.165Z","timestamp":1784473457165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoteacmh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:19 GMT\r\netag: W/\"1b-655be33b3388d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoouqtsm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.699Z","timestamp":1784473457699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoouqtsm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 21:07:55 GMT\r\netag: W/\"1b-6565c4043cde1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5244,"timings":{"blocked":4728,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoszkpat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.892Z","timestamp":1784473458892,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoszkpat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xosclg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.133Z","timestamp":1784473459133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xosclg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:16:48 GMT\r\netag: W/\"1b-656e5001079df\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5311,"timings":{"blocked":4896,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomtflog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.211Z","timestamp":1784473455211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomtflog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 13:19:41 GMT\r\netag: W/\"1b-654eb9c932c4a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoovkfog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.399Z","timestamp":1784473456399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoovkfog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:10 GMT\r\netag: W/\"1b-655a6bb067707\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoewkzlx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.204Z","timestamp":1784473457204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoewkzlx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 20:47:12 GMT\r\netag: W/\"1b-655cf255197c7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofxqmqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.542Z","timestamp":1784473457542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofxqmqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 07:37:40 GMT\r\netag: W/\"1b-65628b2e80fa0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoelmuqe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.198Z","timestamp":1784473458198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoelmuqe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:05 GMT\r\netag: W/\"1b-6567b8f4f398b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4226,"timings":{"blocked":3716,"dns":0,"connect":0,"send":0,"wait":510,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodpdvov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.470Z","timestamp":1784473458470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodpdvov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:22 GMT\r\netag: W/\"1b-65683a6f94d8f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5728,"timings":{"blocked":5352,"dns":0,"connect":0,"send":0,"wait":376,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5jmeenb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.807Z","timestamp":1784473458807,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5jmeenb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 19:27:41 GMT\r\netag: W/\"1b-656ab51322982\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorqqudk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.155Z","timestamp":1784473456155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorqqudk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:36 GMT\r\netag: W/\"1b-6556c626bea3c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomqppga/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.671Z","timestamp":1784473456671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomqppga/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:49 GMT\r\netag: W/\"1b-655a6c0e2b52b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogwlkif/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.877Z","timestamp":1784473457877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogwlkif/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:16 GMT\r\netag: W/\"1b-6567b853d29c5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6839,"timings":{"blocked":6545,"dns":0,"connect":0,"send":0,"wait":294,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopdvyqe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.140Z","timestamp":1784473458140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopdvyqe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:42 GMT\r\netag: W/\"1b-6567b8df093fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3762,"timings":{"blocked":3361,"dns":0,"connect":0,"send":0,"wait":401,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icothydue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.166Z","timestamp":1784473458166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icothydue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:53 GMT\r\netag: W/\"1b-6567b8e8f9315\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5765,"timings":{"blocked":5411,"dns":0,"connect":0,"send":0,"wait":354,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovipfjs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.895Z","timestamp":1784473456895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovipfjs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:17 GMT\r\netag: W/\"1b-655be2c6828d7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobalbdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.999Z","timestamp":1784473456999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobalbdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:07 GMT\r\netag: W/\"1b-655be2f617306\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6801,"timings":{"blocked":6322,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconcddkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.027Z","timestamp":1784473457027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconcddkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:21 GMT\r\netag: W/\"1b-655be30371267\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6285,"timings":{"blocked":5902,"dns":0,"connect":0,"send":0,"wait":383,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouzwuhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.573Z","timestamp":1784473457573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouzwuhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 21:49:45 GMT\r\netag: W/\"1b-656349a33ea34\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6620,"timings":{"blocked":6124,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowcianq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.907Z","timestamp":1784473458907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowcianq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 20:39:40 GMT\r\netag: W/\"1b-656c07076ac29\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6037,"timings":{"blocked":3750,"dns":0,"connect":0,"send":1790,"wait":497,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojumwkb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.019Z","timestamp":1784473456019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojumwkb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 14:36:17 GMT\r\netag: W/\"1b-6555143c1c6c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojzsunm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.241Z","timestamp":1784473456241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojzsunm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:46:23 GMT\r\netag: W/\"1b-6558ceac865bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyfebgv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.955Z","timestamp":1784473456955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyfebgv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:44 GMT\r\netag: W/\"1b-655be2e00ba59\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6421,"timings":{"blocked":6109,"dns":0,"connect":0,"send":0,"wait":312,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojgqlmq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.116Z","timestamp":1784473458116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojgqlmq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:28 GMT\r\netag: W/\"1b-6567b8d20a1aa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icootfnrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.344Z","timestamp":1784473458344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icootfnrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:16 GMT\r\netag: W/\"1b-65683a3084529\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolrjltf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.345Z","timestamp":1784473458345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolrjltf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:16 GMT\r\netag: W/\"1b-65683a312d448\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotkqzvb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.611Z","timestamp":1784473458611,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotkqzvb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3351,"timings":{"blocked":2754,"dns":0,"connect":0,"send":0,"wait":597,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogkqzca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.792Z","timestamp":1784473458792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogkqzca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 10:56:32 GMT\r\netag: W/\"1b-656a42d2b8241\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowuqizn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.081Z","timestamp":1784473456081,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowuqizn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4829,"timings":{"blocked":4224,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogtikhe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.559Z","timestamp":1784473456559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogtikhe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:09 GMT\r\netag: W/\"1b-655a6be7f9fd0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodypjdx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.393Z","timestamp":1784473458393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodypjdx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:43 GMT\r\netag: W/\"1b-65683a4a9cfbe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4439,"timings":{"blocked":3857,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoroddud/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.850Z","timestamp":1784473458850,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoroddud/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoppdcja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.519Z","timestamp":1784473456519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoppdcja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:54 GMT\r\netag: W/\"1b-655a6bd9a7f9e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoetsgob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.996Z","timestamp":1784473456996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoetsgob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:05 GMT\r\netag: W/\"1b-655be2f481ea9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4898,"timings":{"blocked":4316,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoismupd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.478Z","timestamp":1784473457478,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoismupd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/vdsnlhsq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.493Z","timestamp":1784473457493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/vdsnlhsq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 16:58:20 GMT\r\netag: W/\"1b-6561c6a257e31\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaultvd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.107Z","timestamp":1784473458107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaultvd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:23 GMT\r\netag: W/\"1b-6567b8cc7564f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7138,"timings":{"blocked":6657,"dns":0,"connect":0,"send":0,"wait":481,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojsulqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.336Z","timestamp":1784473458336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojsulqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:11 GMT\r\netag: W/\"1b-65683a2bfa36a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoommyid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.483Z","timestamp":1784473458483,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoommyid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoodrjvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.421Z","timestamp":1784473456421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoodrjvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:16 GMT\r\netag: W/\"1b-655a6bb5a4422\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorqzvft/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.923Z","timestamp":1784473456923,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorqzvft/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconvtxlq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.075Z","timestamp":1784473457075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconvtxlq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:38 GMT\r\netag: W/\"1b-655be31362324\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6878,"timings":{"blocked":6440,"dns":0,"connect":0,"send":0,"wait":438,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaunswf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.181Z","timestamp":1784473457181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaunswf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:27 GMT\r\netag: W/\"1b-655be342ae91d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icousossg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.675Z","timestamp":1784473457675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icousossg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:32 GMT\r\netag: W/\"1b-6565a91c00653\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":442,"dns":0,"connect":0,"send":0,"wait":393,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeakhog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.987Z","timestamp":1784473457987,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeakhog/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xizzpz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.750Z","timestamp":1784473458750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xizzpz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:02:17 GMT\r\netag: W/\"1b-656a0e7683121\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5067,"timings":{"blocked":4662,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobpyzxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.165Z","timestamp":1784473456165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobpyzxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 00:00:05 GMT\r\netag: W/\"1b-6556d41e0742d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icognvoqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.194Z","timestamp":1784473456194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icognvoqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 15:02:41 GMT\r\netag: W/\"1b-65579ddd3c2de\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":968,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icombzobg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.583Z","timestamp":1784473456583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icombzobg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:16 GMT\r\netag: W/\"1b-655a6bef4df69\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoucbess/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.490Z","timestamp":1784473457490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoucbess/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 16:29:24 GMT\r\netag: W/\"1b-6561c02aa64d0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5494,"timings":{"blocked":4798,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5yx9wl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.596Z","timestamp":1784473457596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5yx9wl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 17:50:53 GMT\r\netag: W/\"1b-6564561cceeaf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6711,"timings":{"blocked":35,"dns":0,"connect":0,"send":6207,"wait":469,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoodhndj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.088Z","timestamp":1784473458088,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoodhndj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:12 GMT\r\netag: W/\"1b-6567b8c22c959\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozfhchl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.100Z","timestamp":1784473458100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozfhchl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:19 GMT\r\netag: W/\"1b-6567b8c8dd793\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5482,"timings":{"blocked":4990,"dns":0,"connect":0,"send":0,"wait":492,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoovnodo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.303Z","timestamp":1784473458303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoovnodo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:53 GMT\r\netag: W/\"1b-65683a1aecfb1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":400,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqossx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.583Z","timestamp":1784473455583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqossx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:29 GMT\r\netag: W/\"1b-6552f55a88abf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoenqhex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.011Z","timestamp":1784473459011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoenqhex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:41 GMT\r\netag: W/\"1b-656d512b07078\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icookfnqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.298Z","timestamp":1784473457298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icookfnqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 06:38:38 GMT\r\netag: W/\"1b-655eb8646faab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogapxoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.667Z","timestamp":1784473457667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogapxoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:31 GMT\r\netag: W/\"1b-6565a91ae9192\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4885,"timings":{"blocked":4728,"dns":0,"connect":0,"send":0,"wait":157,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xamyds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.215Z","timestamp":1784473458215,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xamyds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 15:29:41 GMT\r\netag: W/\"1b-6567fc2547ff6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2htum6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.655Z","timestamp":1784473458655,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2htum6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xodpiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.277Z","timestamp":1784473459277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xodpiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:18:31 GMT\r\netag: W/\"1b-656f41c97de28\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2516,"timings":{"blocked":2085,"dns":0,"connect":0,"send":0,"wait":431,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovuzzjj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.028Z","timestamp":1784473456028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovuzzjj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 17:13:53 GMT\r\netag: W/\"1b-655537755b097\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolnbsjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.361Z","timestamp":1784473456361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolnbsjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:57 GMT\r\netag: W/\"1b-655a6ba35b994\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojyxdfc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.865Z","timestamp":1784473457865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojyxdfc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:11 GMT\r\netag: W/\"1b-6567b84f07129\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3819,"timings":{"blocked":3436,"dns":0,"connect":0,"send":0,"wait":383,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconyiupn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.951Z","timestamp":1784473457951,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconyiupn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:03 GMT\r\netag: W/\"1b-6567b880c9577\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomdwflb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.080Z","timestamp":1784473458080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomdwflb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:08 GMT\r\netag: W/\"1b-6567b8be8315c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7163,"timings":{"blocked":6611,"dns":0,"connect":0,"send":0,"wait":552,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgoflu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.156Z","timestamp":1784473458156,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgoflu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiwwohz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.510Z","timestamp":1784473458510,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiwwohz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosv8l0t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.093Z","timestamp":1784473459093,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosv8l0t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3545,"timings":{"blocked":3097,"dns":0,"connect":0,"send":0,"wait":448,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomfxsmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.992Z","timestamp":1784473456992,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomfxsmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2459,"timings":{"blocked":1792,"dns":0,"connect":0,"send":0,"wait":667,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohdmmns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.608Z","timestamp":1784473457608,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohdmmns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3814,"timings":{"blocked":53,"dns":0,"connect":0,"send":3336,"wait":425,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosnnwho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.983Z","timestamp":1784473457983,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosnnwho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3743,"timings":{"blocked":3310,"dns":0,"connect":0,"send":0,"wait":433,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovatkth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.795Z","timestamp":1784473458795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovatkth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 11:15:51 GMT\r\netag: W/\"1b-656a472367d7c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6054,"timings":{"blocked":5461,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowtmktv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.886Z","timestamp":1784473458886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowtmktv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:56:40 GMT\r\netag: W/\"25-656bd52ee6669\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":37,"size_decoded":328,"mime_type":"text/css","magic":"ASCII text","md5":"bf02c829fa3d3c30ec64928ea9de9664","sha1":"c28b747b1b53c000e7780ad348a356b33852159d","sha256":"66bb9c852cab3276918df85446a16813b4ae4f2317e31608b5bfda682e44536a","sha512":"556952d28025b5f10ddd4f80f5f2d21935d53e27acb68c7a9507d0f36b36681a30f0059c4a5917bb7279daaf2b4f4b73c662e3f49e3461acaacb079951671da0","ssdeep":"","tlshash":"2380040044dd1454f1410d13f01f70d11554540dc0dd40343104454c4cc3c3003cc357","first_seen":"2026-07-19T15:05:15.475926Z","last_seen":"2026-07-19T15:05:15.475926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5883,"timings":{"blocked":5363,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodpjaai/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.188Z","timestamp":1784473457188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodpjaai/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:31 GMT\r\netag: W/\"1b-655be345eab17\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolslkjq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.475Z","timestamp":1784473457475,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolslkjq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3887,"timings":{"blocked":3551,"dns":0,"connect":0,"send":0,"wait":336,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobqjfmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.500Z","timestamp":1784473457500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobqjfmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:10:12 GMT\r\netag: W/\"1b-6561feeea7721\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6194,"timings":{"blocked":5898,"dns":0,"connect":0,"send":0,"wait":296,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolsyetbb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.516Z","timestamp":1784473457516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolsyetbb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 23:22:02 GMT\r\netag: W/\"1b-65621c65b509f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomktzsp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.114Z","timestamp":1784473458114,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomktzsp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoflqlgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.154Z","timestamp":1784473458154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoflqlgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:45 GMT\r\netag: W/\"1b-6567b8e20fa9c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4950,"timings":{"blocked":4596,"dns":0,"connect":0,"send":0,"wait":354,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoknzwom/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.643Z","timestamp":1784473458643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoknzwom/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 00:03:55 GMT\r\netag: W/\"1b-65686f16104d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohsbagd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.888Z","timestamp":1784473455888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohsbagd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:20:02 GMT\r\netag: W/\"1b-6553f6f86f858\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/plugins/system/helix3/assets/css/pagebuilder.css","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.301Z","timestamp":1784473459301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /plugins/system/helix3/assets/css/pagebuilder.css HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 279\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: \"209-6243789a0d780-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icop0kpzv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.228Z","timestamp":1784473456228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icop0kpzv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 07:41:07 GMT\r\netag: W/\"1b-65587d08916ca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobsndno/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.774Z","timestamp":1784473456774,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobsndno/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/legacy/js/jquery-noconflict.min.js?504da4","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.307Z","timestamp":1784473459307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/legacy/js/jquery-noconflict.min.js?504da4 HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 47\r\nx-content-type-options: nosniff\r\nvary: Accept-encoding\r\nlast-modified: Fri, 04 Oct 2024 01:14:40 GMT\r\netag: \"2f-6239c6534ced1\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoveamjt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.231Z","timestamp":1784473457231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoveamjt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 10:02:06 GMT\r\netag: W/\"1b-655da4014c00f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohwaoqu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.363Z","timestamp":1784473457363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohwaoqu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:04:39 GMT\r\netag: W/\"1b-655fe54005ea7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopvhayg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.881Z","timestamp":1784473457881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopvhayg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:19 GMT\r\netag: W/\"1b-6567b85664d02\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4288,"timings":{"blocked":3824,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooqbabn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.980Z","timestamp":1784473458980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooqbabn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 13:11:50 GMT\r\netag: W/\"1b-656ce4cb71e0d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2481,"timings":{"blocked":1993,"dns":0,"connect":0,"send":0,"wait":488,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqghrgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.655Z","timestamp":1784473455655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqghrgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:22:04 GMT\r\netag: W/\"1b-65532e41fe44b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofwuspi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.058Z","timestamp":1784473457058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofwuspi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:32 GMT\r\netag: W/\"1b-655be30e0fe4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6283,"timings":{"blocked":5878,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolgqtcc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.869Z","timestamp":1784473458869,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolgqtcc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowivora/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.295Z","timestamp":1784473455295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowivora/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 01:34:55 GMT\r\netag: W/\"1b-65509ffd2a5dd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogqplzu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.387Z","timestamp":1784473455387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogqplzu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 22:33:24 GMT\r\netag: W/\"1b-6551b948afe74\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoufaxon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.176Z","timestamp":1784473456176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoufaxon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 06:26:13 GMT\r\netag: W/\"1b-65572a6cdd625\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouodwqr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.454Z","timestamp":1784473456454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouodwqr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:27 GMT\r\netag: W/\"1b-655a6bbffea58\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozgbqtj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.350Z","timestamp":1784473457350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozgbqtj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:54 GMT\r\netag: W/\"1b-655faa857a891\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5704,"timings":{"blocked":5344,"dns":0,"connect":0,"send":0,"wait":360,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxhtske/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.943Z","timestamp":1784473457943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxhtske/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:58 GMT\r\netag: W/\"1b-6567b87c29bfc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7195,"timings":{"blocked":6669,"dns":0,"connect":0,"send":0,"wait":526,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovgwjzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.338Z","timestamp":1784473458338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovgwjzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:12 GMT\r\netag: W/\"1b-65683a2d50fca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5964,"timings":{"blocked":5649,"dns":0,"connect":0,"send":0,"wait":315,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosbdnxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.697Z","timestamp":1784473456697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosbdnxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:01 GMT\r\netag: W/\"1b-655a6c1a3941f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxyjifd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.020Z","timestamp":1784473457020,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxyjifd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouwfukxa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.257Z","timestamp":1784473457257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouwfukxa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:01:52 GMT\r\netag: W/\"1b-655e01d43a373\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/jwbcqmmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.574Z","timestamp":1784473457574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/jwbcqmmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 22:38:37 GMT\r\netag: W/\"1b-6563548fa9416\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohxmabl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.972Z","timestamp":1784473457972,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohxmabl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoebcbdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.049Z","timestamp":1784473456049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoebcbdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:22:18 GMT\r\netag: W/\"1b-65557c65746bb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1049,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoflvoal/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.657Z","timestamp":1784473456657,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoflvoal/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3426,"timings":{"blocked":2976,"dns":0,"connect":0,"send":0,"wait":450,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconjheyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.407Z","timestamp":1784473457407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconjheyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:10:01 GMT\r\netag: W/\"1b-65610014681ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyajqmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.072Z","timestamp":1784473459072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyajqmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 06:43:30 GMT\r\netag: W/\"1b-656dcfdc57bb8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xkctja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.130Z","timestamp":1784473459130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xkctja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:16:47 GMT\r\netag: W/\"1b-656e4fff89c83\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5226,"timings":{"blocked":4749,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoygqyli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.247Z","timestamp":1784473459247,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoygqyli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3032,"timings":{"blocked":2598,"dns":0,"connect":0,"send":0,"wait":434,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolyakwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.196Z","timestamp":1784473456196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolyakwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 15:02:42 GMT\r\netag: W/\"1b-65579dde7d77e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocxnqfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.534Z","timestamp":1784473456534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocxnqfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:01 GMT\r\netag: W/\"1b-655a6be080e78\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodpnfcx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.870Z","timestamp":1784473456870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodpnfcx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:07 GMT\r\netag: W/\"1b-655be2bd4e1ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6322,"timings":{"blocked":5947,"dns":0,"connect":0,"send":0,"wait":375,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqhdnrz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.893Z","timestamp":1784473456893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqhdnrz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:16 GMT\r\netag: W/\"1b-655be2c57023a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6202,"timings":{"blocked":5785,"dns":0,"connect":0,"send":0,"wait":417,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxjvotb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.432Z","timestamp":1784473458432,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxjvotb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:05 GMT\r\netag: W/\"1b-65683a5f93316\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xspibg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.205Z","timestamp":1784473459205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xspibg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 03:34:29 GMT\r\netag: W/\"1b-656ee77a72e4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5495,"timings":{"blocked":5185,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxfcqzm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.307Z","timestamp":1784473457307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxfcqzm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 07:48:27 GMT\r\netag: W/\"1b-655ec7ff67174\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopohxlq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.577Z","timestamp":1784473457577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopohxlq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 00:04:21 GMT\r\netag: W/\"1b-656367b92a1f6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4736,"timings":{"blocked":4149,"dns":0,"connect":0,"send":0,"wait":587,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxvpgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.010Z","timestamp":1784473458010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxvpgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:30 GMT\r\netag: W/\"1b-6567b89ab12be\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5369,"timings":{"blocked":4789,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbisvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.402Z","timestamp":1784473458402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbisvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:48 GMT\r\netag: W/\"1b-65683a4f9959c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2244,"timings":{"blocked":1925,"dns":0,"connect":0,"send":0,"wait":319,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xyjpuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.741Z","timestamp":1784473458741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xyjpuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 03:23:57 GMT\r\netag: W/\"1b-6569dda93e684\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6753,"timings":{"blocked":6274,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopmtggu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.875Z","timestamp":1784473458875,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopmtggu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoereivd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.315Z","timestamp":1784473455315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoereivd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 05:25:24 GMT\r\netag: W/\"1b-6550d381c75b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icog0ycse/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.231Z","timestamp":1784473456231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icog0ycse/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 08:04:04 GMT\r\netag: W/\"1b-65588229308d6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomborld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.150Z","timestamp":1784473457150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomborld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:11 GMT\r\netag: W/\"1b-655be333aebbd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotibeur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.884Z","timestamp":1784473457884,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotibeur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icophozob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.887Z","timestamp":1784473457887,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icophozob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoybqjdu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.799Z","timestamp":1784473458799,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoybqjdu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiuugpj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.715Z","timestamp":1784473456715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiuugpj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:11 GMT\r\netag: W/\"1b-655a6c2311e77\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7039,"timings":{"blocked":6829,"dns":0,"connect":0,"send":0,"wait":210,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoojrlti/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.915Z","timestamp":1784473456915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoojrlti/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:25 GMT\r\netag: W/\"1b-655be2ce20be4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico7827v3a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.336Z","timestamp":1784473456336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico7827v3a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:14:33 GMT\r\netag: W/\"1b-655a59e3ebc08\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosifgwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.773Z","timestamp":1784473457773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosifgwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 21:48:36 GMT\r\netag: W/\"1b-65670ef9da3a9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6204,"timings":{"blocked":5894,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosngche/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.144Z","timestamp":1784473459144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosngche/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:52:41 GMT\r\netag: W/\"1b-656e58059c13f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4478,"timings":{"blocked":4029,"dns":0,"connect":0,"send":0,"wait":449,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icommesju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.525Z","timestamp":1784473456525,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icommesju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovkexdn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.394Z","timestamp":1784473457394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovkexdn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:01:58 GMT\r\netag: W/\"1b-6560fe486f32c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5407,"timings":{"blocked":4953,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogngrsd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.827Z","timestamp":1784473457827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogngrsd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:16 GMT\r\netag: W/\"1b-6567997b7ba25\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5525,"timings":{"blocked":4973,"dns":0,"connect":0,"send":0,"wait":552,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosrbaul/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.905Z","timestamp":1784473457905,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosrbaul/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoepmiie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.966Z","timestamp":1784473457966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoepmiie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:07 GMT\r\netag: W/\"1b-6567b8847d954\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":387,"dns":0,"connect":0,"send":0,"wait":443,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocwtzqr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.390Z","timestamp":1784473458390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocwtzqr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:41 GMT\r\netag: W/\"1b-65683a48ca2ff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6432,"timings":{"blocked":5991,"dns":0,"connect":0,"send":0,"wait":441,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovsrveq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.698Z","timestamp":1784473458698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovsrveq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 12:25:56 GMT\r\netag: W/\"1b-656914f08362b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6228,"timings":{"blocked":5783,"dns":0,"connect":0,"send":0,"wait":445,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icothujpq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.002Z","timestamp":1784473459002,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icothujpq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3143,"timings":{"blocked":2539,"dns":0,"connect":0,"send":0,"wait":604,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoibvjhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.418Z","timestamp":1784473455418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoibvjhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 07:46:40 GMT\r\netag: W/\"1b-655234f24c20c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icockxmh9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.488Z","timestamp":1784473455488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icockxmh9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 17:55:08 GMT\r\netag: W/\"1b-6552bcf2d7185\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojpqqts/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.424Z","timestamp":1784473456424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojpqqts/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:18 GMT\r\netag: W/\"1b-655a6bb733ac0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotgukgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.444Z","timestamp":1784473457444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotgukgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:21:40 GMT\r\netag: W/\"1b-656188cc0c060\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooxjevt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.317Z","timestamp":1784473458317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooxjevt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:00 GMT\r\netag: W/\"1b-65683a2151b2f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6525,"timings":{"blocked":6272,"dns":0,"connect":0,"send":0,"wait":253,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooaaocd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.322Z","timestamp":1784473458322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooaaocd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:02 GMT\r\netag: W/\"1b-65683a23d540e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6736,"timings":{"blocked":6333,"dns":0,"connect":0,"send":0,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico1k4vy6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.049Z","timestamp":1784473459049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico1k4vy6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 01:44:51 GMT\r\netag: W/\"1b-656d8d1b7958b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4717,"timings":{"blocked":4097,"dns":0,"connect":0,"send":0,"wait":620,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoatdtaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.142Z","timestamp":1784473459142,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoatdtaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:52:40 GMT\r\netag: W/\"1b-656e5805183df\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosgqbjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.097Z","timestamp":1784473456097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosgqbjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 02:29:26 GMT\r\netag: W/\"1b-6555b3a2eae70\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":897,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxicprl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.407Z","timestamp":1784473456407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxicprl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:13 GMT\r\netag: W/\"1b-655a6bb289565\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqzzocr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.482Z","timestamp":1784473456482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqzzocr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:37 GMT\r\netag: W/\"1b-655a6bc9d33ee\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofdlnra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.629Z","timestamp":1784473456629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofdlnra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:32 GMT\r\netag: W/\"1b-655a6bfe5791b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoczwqmv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.680Z","timestamp":1784473456680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoczwqmv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:53 GMT\r\netag: W/\"1b-655a6c1258a87\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomfywqs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.375Z","timestamp":1784473457375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomfywqs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 20:48:06 GMT\r\netag: W/\"1b-6560b820134fa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_ptljej/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.547Z","timestamp":1784473457547,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_ptljej/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconatlww/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.894Z","timestamp":1784473457894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconatlww/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:27 GMT\r\netag: W/\"1b-6567b85e87d1a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5861,"timings":{"blocked":5398,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeeaxur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.928Z","timestamp":1784473456928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeeaxur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:33 GMT\r\netag: W/\"1b-655be2d55b533\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7201,"timings":{"blocked":6790,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocinfnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.353Z","timestamp":1784473458353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocinfnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:21 GMT\r\netag: W/\"1b-65683a35bd3c7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6461,"timings":{"blocked":6205,"dns":0,"connect":0,"send":0,"wait":256,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomdzgur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.413Z","timestamp":1784473458413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomdzgur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:54 GMT\r\netag: W/\"1b-65683a55580da\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6935,"timings":{"blocked":6406,"dns":0,"connect":0,"send":0,"wait":529,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xaeyqo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.729Z","timestamp":1784473458729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xaeyqo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:22:30 GMT\r\netag: W/\"1b-6569cfed81b47\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6182,"timings":{"blocked":5715,"dns":0,"connect":0,"send":0,"wait":467,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogbrpxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.945Z","timestamp":1784473458945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogbrpxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:51 GMT\r\netag: W/\"1b-656c9573772a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2456,"timings":{"blocked":2007,"dns":0,"connect":0,"send":0,"wait":449,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodtwgjq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.291Z","timestamp":1784473455291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodtwgjq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 22:11:02 GMT\r\netag: W/\"1b-6550726b4c4bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolhzugs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.481Z","timestamp":1784473456481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolhzugs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:37 GMT\r\netag: W/\"1b-655a6bc94e6ef\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4196,"timings":{"blocked":3799,"dns":0,"connect":0,"send":0,"wait":397,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorxmsbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.083Z","timestamp":1784473458083,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorxmsbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorpjnub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.141Z","timestamp":1784473458141,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorpjnub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":1665,"dns":0,"connect":0,"send":0,"wait":614,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoykytkl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.539Z","timestamp":1784473458539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoykytkl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:47 GMT\r\netag: W/\"1b-65683a88106c4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6231,"timings":{"blocked":5737,"dns":0,"connect":0,"send":0,"wait":494,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoh7l7v2qsht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.120Z","timestamp":1784473456120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoh7l7v2qsht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 10:49:13 GMT\r\netag: W/\"1b-6556235820894\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooeludm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.710Z","timestamp":1784473456710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooeludm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:09 GMT\r\netag: W/\"1b-655a6c20fdad9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxsibkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.339Z","timestamp":1784473457339,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxsibkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3941,"timings":{"blocked":3605,"dns":0,"connect":0,"send":0,"wait":336,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobkmzrz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.310Z","timestamp":1784473455310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobkmzrz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 02:31:50 GMT\r\netag: W/\"1b-6550acb65613a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopmxqrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.103Z","timestamp":1784473456103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopmxqrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 03:27:05 GMT\r\netag: W/\"1b-6555c085a932a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":986,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozoupkb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.389Z","timestamp":1784473456389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozoupkb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:07 GMT\r\netag: W/\"1b-655a6bad3ddea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoitssnd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.722Z","timestamp":1784473456722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoitssnd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:15 GMT\r\netag: W/\"1b-655a6c26b77f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomtcbye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.659Z","timestamp":1784473456659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomtcbye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:44 GMT\r\netag: W/\"1b-655a6c09550b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoisynmc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.827Z","timestamp":1784473456827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoisynmc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:54 GMT\r\netag: W/\"1b-655bb635bbf69\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowrcnfw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.857Z","timestamp":1784473456857,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowrcnfw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:01 GMT\r\netag: W/\"1b-655be2b785a5c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohmxkwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.253Z","timestamp":1784473457253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohmxkwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 16:04:46 GMT\r\netag: W/\"1b-655df510c4d47\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohdinch/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.755Z","timestamp":1784473457755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohdinch/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:50:58 GMT\r\netag: W/\"1b-6566d9dc97721\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6518,"timings":{"blocked":5904,"dns":0,"connect":0,"send":0,"wait":614,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorfgaaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.367Z","timestamp":1784473457367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorfgaaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:04:46 GMT\r\netag: W/\"1b-655fe54690b85\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xdqokg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.789Z","timestamp":1784473457789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xdqokg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:28:56 GMT\r\netag: W/\"1b-656783474c1d3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqcdeyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.161Z","timestamp":1784473458161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqcdeyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:49 GMT\r\netag: W/\"1b-6567b8e5e9fd8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":388,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooatibw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.403Z","timestamp":1784473458403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooatibw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:49 GMT\r\netag: W/\"1b-65683a5032abc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5952,"timings":{"blocked":5641,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xiujey/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.780Z","timestamp":1784473458780,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xiujey/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolqypxd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.306Z","timestamp":1784473455306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolqypxd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 02:31:49 GMT\r\netag: W/\"1b-6550acb57d47c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotnuzco/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.455Z","timestamp":1784473455455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotnuzco/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 15:47:54 GMT\r\netag: W/\"1b-6552a08299084\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotcngsl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.769Z","timestamp":1784473455769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotcngsl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:56:14 GMT\r\netag: W/\"1b-655350b805277\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":980,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozewtsz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.330Z","timestamp":1784473456330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozewtsz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 15:14:10 GMT\r\netag: W/\"1b-655a2429bb342\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaurhfm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.115Z","timestamp":1784473457115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaurhfm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:54 GMT\r\netag: W/\"1b-655be323850c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icop0ebg9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.199Z","timestamp":1784473457199,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icop0ebg9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorfzacw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.289Z","timestamp":1784473458289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorfzacw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:43 GMT\r\netag: W/\"1b-65683a1166815\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5210,"timings":{"blocked":4798,"dns":0,"connect":0,"send":0,"wait":412,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxdbluc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.374Z","timestamp":1784473458374,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxdbluc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2908,"timings":{"blocked":2353,"dns":0,"connect":0,"send":0,"wait":555,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconrddpo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.529Z","timestamp":1784473455529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconrddpo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 19:12:58 GMT\r\netag: W/\"1b-6552ce58b83c3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomvukkk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.774Z","timestamp":1784473457774,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomvukkk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodzlgbs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.982Z","timestamp":1784473457982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodzlgbs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:15 GMT\r\netag: W/\"1b-6567b88c5370c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4403,"timings":{"blocked":3830,"dns":0,"connect":0,"send":0,"wait":573,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyendtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.273Z","timestamp":1784473458273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyendtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:34 GMT\r\netag: W/\"1b-65683a08beaf8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoirczso/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.278Z","timestamp":1784473458278,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoirczso/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozskxbn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.504Z","timestamp":1784473458504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozskxbn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:35 GMT\r\netag: W/\"1b-65683a7bd1a8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4011,"timings":{"blocked":3541,"dns":0,"connect":0,"send":0,"wait":470,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icow7mdyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.747Z","timestamp":1784473458747,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icow7mdyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 06:50:35 GMT\r\netag: W/\"17-656a0bd955a63\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozpcy6p/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.929Z","timestamp":1784473458929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozpcy6p/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 06:14:32 GMT\r\netag: W/\"1b-656c8784fb4e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6395,"timings":{"blocked":5992,"dns":0,"connect":0,"send":0,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotzytcb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.003Z","timestamp":1784473459003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotzytcb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:40 GMT\r\netag: W/\"1b-656d512980671\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5595,"timings":{"blocked":5281,"dns":0,"connect":0,"send":0,"wait":314,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqneydn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.265Z","timestamp":1784473455265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqneydn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 13:53:53 GMT\r\netag: W/\"1b-6550034b7cf48\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoakdmpo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.020Z","timestamp":1784473457020,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoakdmpo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2585,"timings":{"blocked":2079,"dns":0,"connect":0,"send":0,"wait":506,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomlhwui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.826Z","timestamp":1784473457826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomlhwui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:16 GMT\r\netag: W/\"1b-6567997b79ae5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7190,"timings":{"blocked":6661,"dns":0,"connect":0,"send":0,"wait":529,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojddxdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.425Z","timestamp":1784473458425,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojddxdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/css/frontend-edit.css","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.302Z","timestamp":1784473459302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /templates/shaper_strings/css/frontend-edit.css HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: W/\"67096c5b-de2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3554,"size_decoded":1065,"mime_type":"text/css","magic":"ASCII text","md5":"536e895ec41fab20d8f24fe890111116","sha1":"053cec553d38484813bcdce0b44e6923b173309e","sha256":"9e1839b5fac6d35ba9be754aa505582cedf19fdd1e89d8eb487c9f64081f1ede","sha512":"27bb249266243989688988b58d4db48f273e3e9e48bcd8b81ce5c26aeb72695ea25e8b01238ae3b15ba0fca5bb95919828993a1add7394300a8733a719094f13","ssdeep":"","tlshash":"147111b343b85a0cb977c257256a6d59336d8022420ffc588fe832dc9bc6667bd217c8","first_seen":"2023-05-15T08:24:36Z","last_seen":"2026-07-21T15:04:43.624234Z","times_seen":141,"resource_available":false,"data":null}},"time_used":5711,"timings":{"blocked":5301,"dns":0,"connect":0,"send":0,"wait":410,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoerzzjn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.671Z","timestamp":1784473455671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoerzzjn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:42:17 GMT\r\netag: W/\"1b-655332c75a6ef\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofmakvy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.851Z","timestamp":1784473455851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofmakvy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:17:41 GMT\r\netag: W/\"1b-6553f671d874c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2o97r1/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.211Z","timestamp":1784473457211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2o97r1/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 22:38:08 GMT\r\netag: W/\"1b-655d0b20a4485\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocj2tc0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.928Z","timestamp":1784473458928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocj2tc0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 06:14:32 GMT\r\netag: W/\"1b-656c8784f4781\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3398,"timings":{"blocked":2913,"dns":0,"connect":0,"send":0,"wait":485,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxgabzg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.107Z","timestamp":1784473459107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxgabzg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:44:43 GMT\r\netag: W/\"1b-656e2e029db4b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6569,"timings":{"blocked":6020,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopmzoyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.980Z","timestamp":1784473456980,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopmzoyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3990,"timings":{"blocked":3555,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoparaxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.503Z","timestamp":1784473457503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoparaxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:10:18 GMT\r\netag: W/\"1b-6561fef45b686\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomvytbq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.387Z","timestamp":1784473458387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomvytbq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:39 GMT\r\netag: W/\"1b-65683a46e2e20\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":371,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xpdnkc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.704Z","timestamp":1784473458704,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xpdnkc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1922,"timings":{"blocked":1409,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowfexhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.690Z","timestamp":1784473456690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowfexhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:58 GMT\r\netag: W/\"1b-655a6c1697923\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokbrpvz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.772Z","timestamp":1784473456772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokbrpvz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 09:12:09 GMT\r\netag: W/\"1b-655b151c47369\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoycjpaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.495Z","timestamp":1784473457495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoycjpaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 20:03:49 GMT\r\netag: W/\"1b-6561f01857d53\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6523,"timings":{"blocked":5990,"dns":0,"connect":0,"send":0,"wait":533,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotxlaxg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.532Z","timestamp":1784473457532,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotxlaxg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojzazcq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.713Z","timestamp":1784473458713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojzazcq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 21:13:21 GMT\r\netag: W/\"1b-65698ad40b18c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6202,"timings":{"blocked":5764,"dns":0,"connect":0,"send":0,"wait":438,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovxvbfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.389Z","timestamp":1784473458389,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovxvbfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodnhost/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.922Z","timestamp":1784473458922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodnhost/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 04:49:19 GMT\r\netag: W/\"1b-656c7478dd73f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6686,"timings":{"blocked":6145,"dns":0,"connect":0,"send":0,"wait":541,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopuplui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.143Z","timestamp":1784473456143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopuplui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 21:06:17 GMT\r\netag: W/\"1b-6556ad45230ac\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":926,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":926,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoccwdsk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.142Z","timestamp":1784473457142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoccwdsk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:08 GMT\r\netag: W/\"1b-655be33078784\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoywtdil/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.260Z","timestamp":1784473457260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoywtdil/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:14 GMT\r\netag: W/\"1b-655e03ebf8800\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobbnvbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.338Z","timestamp":1784473457338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobbnvbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:53 GMT\r\netag: W/\"1b-655faa8451a95\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5689,"timings":{"blocked":5170,"dns":0,"connect":0,"send":0,"wait":519,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xlmawu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.711Z","timestamp":1784473457711,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xlmawu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2476,"timings":{"blocked":2147,"dns":0,"connect":0,"send":0,"wait":329,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyvabep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.418Z","timestamp":1784473458418,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyvabep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2058,"timings":{"blocked":1605,"dns":0,"connect":0,"send":0,"wait":453,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojvduii/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.452Z","timestamp":1784473458452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojvduii/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:18 GMT\r\netag: W/\"1b-65683a6bacd91\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6861,"timings":{"blocked":3992,"dns":0,"connect":0,"send":2411,"wait":458,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoggtwxz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.936Z","timestamp":1784473457936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoggtwxz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:53 GMT\r\netag: W/\"1b-6567b876f0d61\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5669,"timings":{"blocked":5377,"dns":0,"connect":0,"send":0,"wait":292,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozmhgtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.020Z","timestamp":1784473458020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozmhgtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:34 GMT\r\netag: W/\"1b-6567b89dd7cfb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6626,"timings":{"blocked":6162,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icontllaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.066Z","timestamp":1784473458066,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icontllaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2329,"timings":{"blocked":1816,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoetnwwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.193Z","timestamp":1784473458193,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoetnwwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopfmjyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.086Z","timestamp":1784473456086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopfmjyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:36:00 GMT\r\netag: W/\"1b-65558cded365d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohnqbpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.123Z","timestamp":1784473457123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohnqbpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:59 GMT\r\netag: W/\"1b-655be327ab8b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6866,"timings":{"blocked":4307,"dns":0,"connect":0,"send":2071,"wait":488,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxirvmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.284Z","timestamp":1784473457284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxirvmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 03:17:44 GMT\r\netag: W/\"1b-655e8b7cef120\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovwlbvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.334Z","timestamp":1784473457334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovwlbvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:52 GMT\r\netag: W/\"1b-655faa8358a38\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5482,"timings":{"blocked":4862,"dns":0,"connect":0,"send":0,"wait":620,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogrtogg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.670Z","timestamp":1784473458670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogrtogg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 06:13:44 GMT\r\netag: W/\"1b-6568c1bed980c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3407,"timings":{"blocked":3018,"dns":0,"connect":0,"send":0,"wait":389,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomljckj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.825Z","timestamp":1784473458825,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomljckj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/dfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.842Z","timestamp":1784473458842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/dfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 07:08:42 GMT\r\netag: W/\"1b-656b51c2d7dd9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1955,"timings":{"blocked":1646,"dns":0,"connect":0,"send":0,"wait":309,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojeqtus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.246Z","timestamp":1784473456246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojeqtus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:46:23 GMT\r\netag: W/\"1b-6558cead3a0bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icostlfrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.663Z","timestamp":1784473456663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icostlfrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:45 GMT\r\netag: W/\"1b-655a6c0afbe4e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomalmat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.851Z","timestamp":1784473456851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomalmat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:59 GMT\r\netag: W/\"1b-655be2b53bb62\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5807,"timings":{"blocked":5396,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico7eeszu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.522Z","timestamp":1784473457522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico7eeszu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 00:16:12 GMT\r\netag: W/\"1b-656228817946d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiitvyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.632Z","timestamp":1784473457632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiitvyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 10:57:39 GMT\r\netag: W/\"1b-65653b9caf029\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoglwiih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.979Z","timestamp":1784473457979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoglwiih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:13 GMT\r\netag: W/\"1b-6567b88a4ce2e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5372,"timings":{"blocked":4676,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorzlzmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.231Z","timestamp":1784473458231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorzlzmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 18:40:51 GMT\r\netag: W/\"1b-656826dfc788b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5722,"timings":{"blocked":5261,"dns":0,"connect":0,"send":0,"wait":461,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowkpezg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.271Z","timestamp":1784473458271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowkpezg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:32 GMT\r\netag: W/\"1b-65683a074c918\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5504,"timings":{"blocked":5133,"dns":0,"connect":0,"send":0,"wait":371,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoloeppo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.996Z","timestamp":1784473455996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoloeppo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:52:06 GMT\r\netag: W/\"1b-6554d4b6b9cf1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico27zmtj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.295Z","timestamp":1784473457295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico27zmtj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 05:28:44 GMT\r\netag: W/\"1b-655ea8c42c3c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofjoqfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.372Z","timestamp":1784473457372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofjoqfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:42:10 GMT\r\netag: W/\"1b-655feda2cab4a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogggjcd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.451Z","timestamp":1784473457451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogggjcd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:26:05 GMT\r\netag: W/\"1b-656189c8d1efc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":4973,"wait":563,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovktfdn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.889Z","timestamp":1784473457889,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovktfdn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3749,"timings":{"blocked":3313,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozyqhls/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.260Z","timestamp":1784473458260,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozyqhls/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2072,"timings":{"blocked":1537,"dns":0,"connect":0,"send":0,"wait":535,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconwekeq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.440Z","timestamp":1784473458440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconwekeq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:10 GMT\r\netag: W/\"1b-65683a6411954\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5425,"timings":{"blocked":5135,"dns":0,"connect":0,"send":0,"wait":290,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_njklcb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.677Z","timestamp":1784473458677,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_njklcb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3753,"timings":{"blocked":3334,"dns":0,"connect":0,"send":0,"wait":419,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomjuiri/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.380Z","timestamp":1784473455380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomjuiri/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 21:06:06 GMT\r\netag: W/\"1b-6551a5c54f0b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico19yuzy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.501Z","timestamp":1784473455501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico19yuzy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 17:55:12 GMT\r\netag: W/\"1b-6552bcf6a99b4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojbduuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.346Z","timestamp":1784473457346,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojbduuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:54 GMT\r\netag: W/\"1b-655faa8551852\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xludxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.613Z","timestamp":1784473457613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xludxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 00:24:56 GMT\r\netag: W/\"1b-6564ae3098cbe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5965,"timings":{"blocked":61,"dns":0,"connect":0,"send":5529,"wait":375,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogykefs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.839Z","timestamp":1784473457839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogykefs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:25:59 GMT\r\netag: W/\"1b-6567b843936f5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2461,"timings":{"blocked":2152,"dns":0,"connect":0,"send":0,"wait":309,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xwsnhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.706Z","timestamp":1784473458706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xwsnhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 18:36:22 GMT\r\netag: W/\"1b-656967bcc9e5b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/htjztvyl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.744Z","timestamp":1784473458744,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/htjztvyl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3259,"timings":{"blocked":2663,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozlraxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.094Z","timestamp":1784473459094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozlraxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 12:52:36 GMT\r\netag: W/\"1b-656e225c2a482\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4883,"timings":{"blocked":4363,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosd7r5q/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.241Z","timestamp":1784473455241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosd7r5q/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 10:20:13 GMT\r\netag: W/\"1b-654fd389a2837\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoehvnav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.111Z","timestamp":1784473456111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoehvnav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 07:57:48 GMT\r\netag: W/\"1b-6555fd07baa5c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotdjyhb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.173Z","timestamp":1784473456173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotdjyhb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 00:55:05 GMT\r\netag: W/\"1b-6556e0692efd3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobpxmjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.890Z","timestamp":1784473456890,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobpxmjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:15 GMT\r\netag: W/\"1b-655be2c45acbc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoomlplu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.398Z","timestamp":1784473457398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoomlplu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:04:55 GMT\r\netag: W/\"1b-6560fef0c6e4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6013,"timings":{"blocked":4362,"dns":0,"connect":0,"send":1188,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovklydl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.598Z","timestamp":1784473457598,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovklydl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobxgafl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.086Z","timestamp":1784473458086,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobxgafl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopemmgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.860Z","timestamp":1784473458860,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopemmgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1858,"timings":{"blocked":1347,"dns":0,"connect":0,"send":0,"wait":511,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowenmpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.095Z","timestamp":1784473456095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowenmpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 00:33:49 GMT\r\netag: W/\"1b-655599ca99a5f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconcgwiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.481Z","timestamp":1784473458481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconcgwiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:26 GMT\r\netag: W/\"1b-65683a73a4e2d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4718,"timings":{"blocked":4407,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopzxers/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.105Z","timestamp":1784473459105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopzxers/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:44:43 GMT\r\netag: W/\"1b-656e2e0220b4c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6328,"timings":{"blocked":5917,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xpcuhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.128Z","timestamp":1784473459128,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xpcuhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoggariu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.254Z","timestamp":1784473459254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoggariu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:20 GMT\r\netag: W/\"1b-656f1d169a82a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4658,"timings":{"blocked":3961,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouzgqxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.778Z","timestamp":1784473455778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouzgqxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 08:03:03 GMT\r\netag: W/\"1b-65537a79960dd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogtlwsr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.974Z","timestamp":1784473456974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogtlwsr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:54 GMT\r\netag: W/\"1b-655be2e9cdb02\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6289,"timings":{"blocked":5856,"dns":0,"connect":0,"send":0,"wait":433,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorgfllq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.462Z","timestamp":1784473457462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorgfllq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:31:20 GMT\r\netag: W/\"1b-65618af4ee018\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico0zg4pg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.593Z","timestamp":1784473457593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico0zg4pg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 17:00:05 GMT\r\netag: W/\"1b-65644ac1ac3bc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6166,"timings":{"blocked":19,"dns":0,"connect":0,"send":5911,"wait":236,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopbaddh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.073Z","timestamp":1784473458073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopbaddh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:03 GMT\r\netag: W/\"1b-6567b8ba377a0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":359,"dns":0,"connect":0,"send":0,"wait":174,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorbbzoo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.813Z","timestamp":1784473458813,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorbbzoo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icou8naxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.074Z","timestamp":1784473459074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icou8naxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 07:42:04 GMT\r\netag: W/\"1b-656ddcf3af5cd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6386,"timings":{"blocked":5932,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xxpvyc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.121Z","timestamp":1784473459121,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xxpvyc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1717,"timings":{"blocked":1101,"dns":0,"connect":0,"send":0,"wait":616,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobmvkhc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.746Z","timestamp":1784473455746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobmvkhc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:54:41 GMT\r\netag: W/\"1b-6553505f560b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosxzojj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.436Z","timestamp":1784473456436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosxzojj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:22 GMT\r\netag: W/\"1b-655a6bbbda19c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovvzoek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.099Z","timestamp":1784473458099,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovvzoek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobdnrld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.123Z","timestamp":1784473458123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobdnrld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:32 GMT\r\netag: W/\"1b-6567b8d5ccfe7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5102,"timings":{"blocked":4615,"dns":0,"connect":0,"send":0,"wait":487,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovkinwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.476Z","timestamp":1784473458476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovkinwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:25 GMT\r\netag: W/\"1b-65683a7307a8e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":476,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xopqwa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.728Z","timestamp":1784473458728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xopqwa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:22:27 GMT\r\netag: W/\"1b-6569cfead0408\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icognaazh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.793Z","timestamp":1784473458793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icognaazh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 11:15:46 GMT\r\netag: W/\"1b-656a471ebc87c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6058,"timings":{"blocked":5559,"dns":0,"connect":0,"send":0,"wait":499,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolroyvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.921Z","timestamp":1784473458921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolroyvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 04:47:58 GMT\r\netag: W/\"1b-656c742c45016\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4142,"timings":{"blocked":3558,"dns":0,"connect":0,"send":0,"wait":584,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozvyx4b/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.209Z","timestamp":1784473457209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozvyx4b/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 22:38:07 GMT\r\netag: W/\"1b-655d0b1f729e6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconveppf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.238Z","timestamp":1784473457238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconveppf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:29 GMT\r\netag: W/\"1b-655deb6497083\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xzmmzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.733Z","timestamp":1784473458733,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xzmmzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5u23nq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.047Z","timestamp":1784473459047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5u23nq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 01:33:34 GMT\r\netag: W/\"1b-656d8a95def00\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6616,"timings":{"blocked":6131,"dns":0,"connect":0,"send":0,"wait":485,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoolbqmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.051Z","timestamp":1784473459051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoolbqmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 01:54:28 GMT\r\netag: W/\"1b-656d8f415faf2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5278,"timings":{"blocked":3662,"dns":0,"connect":0,"send":1153,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohbjpuo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.053Z","timestamp":1784473459053,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohbjpuo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoliq4c3/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.285Z","timestamp":1784473459285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoliq4c3/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 12:14:55 GMT\r\netag: W/\"1b-656f5bcdbcc40\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5810,"timings":{"blocked":5314,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopvzsvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.785Z","timestamp":1784473455785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopvzsvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 08:24:02 GMT\r\netag: W/\"1b-65537f2a0142d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobankes/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.422Z","timestamp":1784473456422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobankes/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:16 GMT\r\netag: W/\"1b-655a6bb629121\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobcskni/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.642Z","timestamp":1784473457642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobcskni/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 15:09:23 GMT\r\netag: W/\"1b-656573e0c6d6b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5908,"timings":{"blocked":5449,"dns":0,"connect":0,"send":0,"wait":459,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxtydlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.424Z","timestamp":1784473458424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxtydlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:00 GMT\r\netag: W/\"1b-65683a5b1d978\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6435,"timings":{"blocked":6187,"dns":0,"connect":0,"send":0,"wait":248,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoezpvvj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.434Z","timestamp":1784473458434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoezpvvj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:06 GMT\r\netag: W/\"1b-65683a60d5755\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5931,"timings":{"blocked":5620,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbz4vk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.067Z","timestamp":1784473459067,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbz4vk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowdpdkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.789Z","timestamp":1784473455789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowdpdkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 11:15:29 GMT\r\netag: W/\"1b-6553a57c447bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocjc3bn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.281Z","timestamp":1784473457281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocjc3bn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 01:19:28 GMT\r\netag: W/\"1b-655e710d438c7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_ypjzcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.617Z","timestamp":1784473457617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_ypjzcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 03:15:50 GMT\r\netag: W/\"1e-6564d462ded05\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":5722,"timings":{"blocked":74,"dns":0,"connect":0,"send":5365,"wait":283,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokyqqaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.220Z","timestamp":1784473458220,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokyqqaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 18:20:35 GMT\r\netag: W/\"1b-65682258cf910\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopuataa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.423Z","timestamp":1784473456423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopuataa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:17 GMT\r\netag: W/\"1b-655a6bb6ace81\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxdbmzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.447Z","timestamp":1784473457447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxdbmzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:23:31 GMT\r\netag: W/\"1b-656189357366e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojauvwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.895Z","timestamp":1784473457895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojauvwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:28 GMT\r\netag: W/\"1b-6567b85f48339\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4255,"timings":{"blocked":3752,"dns":0,"connect":0,"send":0,"wait":503,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofcpocp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.917Z","timestamp":1784473457917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofcpocp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:41 GMT\r\netag: W/\"1b-6567b86bee7ac\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozhdoiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.314Z","timestamp":1784473458314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozhdoiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:58 GMT\r\netag: W/\"1b-65683a200a8cf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3993,"timings":{"blocked":3550,"dns":0,"connect":0,"send":0,"wait":443,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowqbeer/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.324Z","timestamp":1784473458324,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowqbeer/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobbzwih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.532Z","timestamp":1784473455532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobbzwih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 20:27:27 GMT\r\netag: W/\"1b-6552deff1c592\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobtaiyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.985Z","timestamp":1784473458985,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobtaiyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1764,"timings":{"blocked":1157,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogfiyov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.103Z","timestamp":1784473457103,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogfiyov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:47 GMT\r\netag: W/\"1b-655be31c785cf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoczbqds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.643Z","timestamp":1784473457643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoczbqds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 15:09:23 GMT\r\netag: W/\"1b-656573e15470b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7012,"timings":{"blocked":6598,"dns":0,"connect":0,"send":0,"wait":414,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvaybl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.831Z","timestamp":1784473457831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvaybl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:20 GMT\r\netag: W/\"1b-6567997eb5ce6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7204,"timings":{"blocked":6652,"dns":0,"connect":0,"send":0,"wait":552,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouizwtj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.874Z","timestamp":1784473457874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouizwtj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:14 GMT\r\netag: W/\"1b-6567b851cff67\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4299,"timings":{"blocked":3825,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohekvbq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.815Z","timestamp":1784473458815,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohekvbq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/jquery.sticky.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.321Z","timestamp":1784473459321,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /templates/shaper_strings/js/jquery.sticky.js HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: W/\"67096c5b-2313\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodfsxab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.039Z","timestamp":1784473456039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodfsxab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:21:36 GMT\r\netag: W/\"1b-65557c3d0bb2e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconkvcdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.588Z","timestamp":1784473456588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconkvcdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:18 GMT\r\netag: W/\"1b-655a6bf0df548\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaeffqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.990Z","timestamp":1784473456990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaeffqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:02 GMT\r\netag: W/\"1b-655be2f1d74d0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowefgmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.656Z","timestamp":1784473457656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowefgmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:59 GMT\r\netag: W/\"1b-6565a687400c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5353,"timings":{"blocked":4732,"dns":0,"connect":0,"send":0,"wait":621,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofbcrhj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.778Z","timestamp":1784473457778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofbcrhj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 01:57:52 GMT\r\netag: W/\"1b-656746b0cfa21\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6965,"timings":{"blocked":6570,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovswxep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.031Z","timestamp":1784473458031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovswxep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:41 GMT\r\netag: W/\"1b-6567b8a47cfb5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3026,"timings":{"blocked":2553,"dns":0,"connect":0,"send":0,"wait":473,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosuktle/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.503Z","timestamp":1784473458503,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosuktle/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1939,"timings":{"blocked":1314,"dns":0,"connect":0,"send":0,"wait":625,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xxfkuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.973Z","timestamp":1784473458973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xxfkuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 10:15:00 GMT\r\netag: W/\"1b-656cbd44a7eac\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5828,"timings":{"blocked":5316,"dns":0,"connect":0,"send":0,"wait":512,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomeupno/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.648Z","timestamp":1784473456648,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomeupno/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocendky/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.309Z","timestamp":1784473457309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocendky/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 08:53:00 GMT\r\netag: W/\"1b-655ed66c9fa18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoihhyor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.741Z","timestamp":1784473457741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoihhyor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 12:12:56 GMT\r\netag: W/\"1b-65668e4d8402f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozahxdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.900Z","timestamp":1784473457900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozahxdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:32 GMT\r\netag: W/\"1b-6567b862b5275\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5486,"timings":{"blocked":5197,"dns":0,"connect":0,"send":0,"wait":289,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xixypp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.753Z","timestamp":1784473458753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xixypp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:11:03 GMT\r\netag: W/\"1b-656a106c934d6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4667,"timings":{"blocked":4217,"dns":0,"connect":0,"send":0,"wait":450,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico6y3263/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.065Z","timestamp":1784473459065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico6y3263/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 03:56:58 GMT\r\netag: W/\"1b-656daaa373514\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5445,"timings":{"blocked":5022,"dns":0,"connect":0,"send":0,"wait":423,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomnfyvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.607Z","timestamp":1784473455607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomnfyvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 01:41:57 GMT\r\netag: W/\"1b-6553254a745f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icootavtb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.592Z","timestamp":1784473456592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icootavtb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:20 GMT\r\netag: W/\"1b-655a6bf26fb86\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomgswtl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.001Z","timestamp":1784473457001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomgswtl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:08 GMT\r\netag: W/\"1b-655be2f728a03\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1053,"timings":{"blocked":635,"dns":0,"connect":0,"send":0,"wait":418,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icostalje/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.053Z","timestamp":1784473457053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icostalje/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:30 GMT\r\netag: W/\"1b-655be30c7a9f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4244,"timings":{"blocked":3670,"dns":0,"connect":0,"send":0,"wait":574,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icophrzhe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.165Z","timestamp":1784473459165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icophrzhe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 00:41:16 GMT\r\netag: W/\"1b-656ec0c2e9321\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3557,"timings":{"blocked":3055,"dns":0,"connect":0,"send":0,"wait":502,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopipt16/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.497Z","timestamp":1784473455497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopipt16/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 17:55:11 GMT\r\netag: W/\"1b-6552bcf6365f6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoifyvja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.014Z","timestamp":1784473457014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoifyvja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:15 GMT\r\netag: W/\"1b-655be2fd92395\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6977,"timings":{"blocked":6750,"dns":0,"connect":0,"send":0,"wait":227,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xrporx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.210Z","timestamp":1784473458210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xrporx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 14:28:05 GMT\r\netag: W/\"1b-6567ee6103960\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4533,"timings":{"blocked":3952,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoumzdnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.225Z","timestamp":1784473458225,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoumzdnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xyuqbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.276Z","timestamp":1784473459276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xyuqbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:18:31 GMT\r\netag: W/\"1b-656f41c930bc7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4405,"timings":{"blocked":3955,"dns":0,"connect":0,"send":0,"wait":450,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqwxebe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.545Z","timestamp":1784473455545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqwxebe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:40 GMT\r\netag: W/\"1b-6552e9531f2d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogotxqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.916Z","timestamp":1784473456916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogotxqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:25 GMT\r\netag: W/\"1b-655be2cea9763\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoornlbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.101Z","timestamp":1784473458101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoornlbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:19 GMT\r\netag: W/\"1b-6567b8c977c52\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6899,"timings":{"blocked":6488,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojggjak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.618Z","timestamp":1784473458618,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojggjak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouptkup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.604Z","timestamp":1784473458604,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouptkup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqbgpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.662Z","timestamp":1784473458662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqbgpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 02:55:15 GMT\r\netag: W/\"1b-656895615d8a5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6551,"timings":{"blocked":6132,"dns":0,"connect":0,"send":0,"wait":419,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xliyhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.755Z","timestamp":1784473458755,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xliyhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1975,"timings":{"blocked":1659,"dns":0,"connect":0,"send":0,"wait":316,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/css/font-awesome-v4-shims.min.css","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.298Z","timestamp":1784473459298,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /templates/shaper_strings/css/font-awesome-v4-shims.min.css HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouvixry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.758Z","timestamp":1784473457758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouvixry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:00 GMT\r\netag: W/\"1b-6566d9de38700\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4030,"timings":{"blocked":3758,"dns":0,"connect":0,"send":0,"wait":272,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokeduqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.790Z","timestamp":1784473455790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokeduqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 11:15:29 GMT\r\netag: W/\"1b-6553a57cbf87f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouygcmx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.864Z","timestamp":1784473456864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouygcmx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:04 GMT\r\netag: W/\"1b-655be2ba64ff5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3304,"timings":{"blocked":2842,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoysooap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.057Z","timestamp":1784473457057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoysooap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:31 GMT\r\netag: W/\"1b-655be30d88271\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7195,"timings":{"blocked":6780,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconxhsfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.117Z","timestamp":1784473457117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconxhsfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:55 GMT\r\netag: W/\"1b-655be3240fb7f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohjnjbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.651Z","timestamp":1784473457651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohjnjbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:58 GMT\r\netag: W/\"1b-6565a685dd8e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6707,"timings":{"blocked":6262,"dns":0,"connect":0,"send":0,"wait":445,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoalwrmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.679Z","timestamp":1784473457679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoalwrmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:33 GMT\r\netag: W/\"1b-6565a91ca56f4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5348,"timings":{"blocked":4728,"dns":0,"connect":0,"send":0,"wait":620,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosljivh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.565Z","timestamp":1784473456565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosljivh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:11 GMT\r\netag: W/\"1b-655a6bea0d3ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowxsjqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.696Z","timestamp":1784473456696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowxsjqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:01 GMT\r\netag: W/\"1b-655a6c19ad9c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqsxtwi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.359Z","timestamp":1784473457359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqsxtwi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 01:32:46 GMT\r\netag: W/\"1b-655fb5e427923\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxxmdnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.520Z","timestamp":1784473458520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxxmdnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:43 GMT\r\netag: W/\"1b-65683a8382686\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkxfgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.096Z","timestamp":1784473459096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkxfgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 12:52:37 GMT\r\netag: W/\"1b-656e225d1c783\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeccclq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.176Z","timestamp":1784473459176,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeccclq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1540,"timings":{"blocked":822,"dns":0,"connect":0,"send":0,"wait":718,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosltirg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.863Z","timestamp":1784473457863,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosltirg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3116,"timings":{"blocked":2551,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icompvdja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.177Z","timestamp":1784473458177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icompvdja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:55 GMT\r\netag: W/\"1b-6567b8eb635b3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxkmgci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.782Z","timestamp":1784473458782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxkmgci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:31:55 GMT\r\netag: W/\"1b-656a1516a8af6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6159,"timings":{"blocked":5725,"dns":0,"connect":0,"send":0,"wait":434,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovtznkx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.990Z","timestamp":1784473455990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovtznkx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:22:42 GMT\r\netag: W/\"1b-6554ce247ca96\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovcowry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.256Z","timestamp":1784473456256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovcowry/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 16:59:00 GMT\r\netag: W/\"1b-6558f9baf5550\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvhkmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.724Z","timestamp":1784473456724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvhkmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:16 GMT\r\netag: W/\"1b-655a6c27c11f2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxzsma/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.912Z","timestamp":1784473456912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxzsma/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:23 GMT\r\netag: W/\"1b-655be2cc859c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico4fns0a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.513Z","timestamp":1784473457513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico4fns0a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 22:58:19 GMT\r\netag: W/\"1b-65621718ef314\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7304,"timings":{"blocked":6765,"dns":0,"connect":0,"send":0,"wait":539,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocapwqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.949Z","timestamp":1784473458949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocapwqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:53 GMT\r\netag: W/\"1b-656c95752ab62\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5985,"timings":{"blocked":5490,"dns":0,"connect":0,"send":0,"wait":495,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowo1ljr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.291Z","timestamp":1784473459291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowo1ljr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 14:56:21 GMT\r\netag: W/\"1b-656f7fe2837f7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofxyhin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.615Z","timestamp":1784473456615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofxyhin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:28 GMT\r\netag: W/\"1b-655a6bfab8cfe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoehwsgx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.455Z","timestamp":1784473457455,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoehwsgx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocwnhre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.735Z","timestamp":1784473457735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocwnhre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:45 GMT\r\netag: W/\"1b-65664f3b6fafb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4295,"timings":{"blocked":3767,"dns":0,"connect":0,"send":0,"wait":528,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojiuzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.811Z","timestamp":1784473457811,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojiuzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooheoip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.909Z","timestamp":1784473457909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooheoip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:37 GMT\r\netag: W/\"1b-6567b86798211\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5943,"timings":{"blocked":5510,"dns":0,"connect":0,"send":0,"wait":433,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icommvraf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.025Z","timestamp":1784473458025,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icommvraf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2342,"timings":{"blocked":1829,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xynbeb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.631Z","timestamp":1784473458631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xynbeb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 21:04:48 GMT\r\netag: W/\"1b-6568470d41427\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6271,"timings":{"blocked":5833,"dns":0,"connect":0,"send":0,"wait":438,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoewgdyu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.873Z","timestamp":1784473458873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoewgdyu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:10:58 GMT\r\netag: W/\"25-656bcaf7ff4c7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotfpktu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.560Z","timestamp":1784473456560,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotfpktu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2583,"timings":{"blocked":2180,"dns":0,"connect":0,"send":0,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbfiit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.579Z","timestamp":1784473456579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbfiit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:15 GMT\r\netag: W/\"1b-655a6bedbc98b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoskhzxt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.038Z","timestamp":1784473457038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoskhzxt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:25 GMT\r\netag: W/\"1b-655be3072c39f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1008,"timings":{"blocked":628,"dns":0,"connect":0,"send":0,"wait":380,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoajzhid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.112Z","timestamp":1784473457112,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoajzhid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2461,"timings":{"blocked":1946,"dns":0,"connect":0,"send":0,"wait":515,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodfyzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.017Z","timestamp":1784473458017,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodfyzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoettzfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.564Z","timestamp":1784473458564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoettzfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:00 GMT\r\netag: W/\"1b-65683a93d03bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6089,"timings":{"blocked":5557,"dns":0,"connect":0,"send":0,"wait":532,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobicycq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.151Z","timestamp":1784473459151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobicycq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 21:27:08 GMT\r\netag: W/\"1b-656e955e5f16d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3570,"timings":{"blocked":3069,"dns":0,"connect":0,"send":0,"wait":501,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovjsahr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.300Z","timestamp":1784473455300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovjsahr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 01:34:59 GMT\r\netag: W/\"1b-6550a000d1e99\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoadxddp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.383Z","timestamp":1784473455383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoadxddp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 21:16:53 GMT\r\netag: W/\"1b-6551a82d9967d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovynrqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.608Z","timestamp":1784473458608,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovynrqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico187c62/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.255Z","timestamp":1784473455255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico187c62/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:57:27 GMT\r\netag: W/\"21-654fe94543ca9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":323,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12728a139fd14c86ed003fd3946e5a63","sha1":"cf382751d050026758e62299cd68e224b109377c","sha256":"80812eea16b04783e366c150aae6925e49c4ef007098127521a82a0a7e911b91","sha512":"f2cfef2d0e294fcd053dacfd03aaea85c6f5a565194b42b2202c9c725287d2cf1cf2a13950e73899f84e64c20603167c9d71556116d458bc2f64338993aea3dd","ssdeep":"","tlshash":"ab8000a8c00aa0ca83a0c20283002b2f0000b028c2083c22f00a020c08e2e000f80fac","first_seen":"2026-07-19T15:05:15.478732Z","last_seen":"2026-07-19T15:05:15.478732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icog7vjmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.209Z","timestamp":1784473456209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icog7vjmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 19:23:29 GMT\r\netag: W/\"1b-6557d82857d62\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":934,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosslszu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.803Z","timestamp":1784473457803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosslszu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:10 GMT\r\netag: W/\"1b-6567956f4eec7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6567,"timings":{"blocked":6071,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoewqycm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.471Z","timestamp":1784473456471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoewqycm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:32 GMT\r\netag: W/\"1b-655a6bc4a60d3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozacelf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.105Z","timestamp":1784473458105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozacelf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:22 GMT\r\netag: W/\"1b-6567b8cbde070\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotgpcnj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.879Z","timestamp":1784473458879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotgpcnj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:11:48 GMT\r\netag: W/\"25-656bcb27b23a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":37,"size_decoded":329,"mime_type":"text/css","magic":"ASCII text","md5":"ea127b801b6b55c5997a8bbcec19a7f9","sha1":"baf4f072c6b982ee654a1172cd06a033a4664c11","sha256":"a345ad0e0b1265a25ec3696867d4797229b693dddda8932ea810bf1282595513","sha512":"9cdf9e4196a1f5c11134cb2dc61931bdd65ffdbbc65e3eeceaba41f06dc50b9ba959c411305e60b18e85e64747df41be3630985e22c1dd31b72dcb427dc07265","ssdeep":"","tlshash":"d8800400004d034cd1413d03704f73113115571440dd413010140d4c4cd3c3103c0754","first_seen":"2026-07-19T15:05:15.480387Z","last_seen":"2026-07-19T15:05:15.480387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3548,"timings":{"blocked":3220,"dns":0,"connect":0,"send":0,"wait":328,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooqovjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.880Z","timestamp":1784473458880,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooqovjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xrdvuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.219Z","timestamp":1784473459219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xrdvuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 05:16:40 GMT\r\netag: W/\"1b-656efe50adaaf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6048,"timings":{"blocked":5823,"dns":0,"connect":0,"send":0,"wait":225,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxhjmmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.591Z","timestamp":1784473456591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxhjmmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:19 GMT\r\netag: W/\"1b-655a6bf1e8f47\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/htmzihjpce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.705Z","timestamp":1784473457705,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/htmzihjpce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 00:08:33 GMT\r\netag: W/\"20-6565ec6446f39\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopoofql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.094Z","timestamp":1784473458094,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopoofql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2170,"timings":{"blocked":1474,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocdswum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.891Z","timestamp":1784473455891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocdswum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:20:10 GMT\r\netag: W/\"1b-6553f6fffc235\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiozoik/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.126Z","timestamp":1784473457126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiozoik/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:01 GMT\r\netag: W/\"1b-655be329499b4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovaonvq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.750Z","timestamp":1784473457750,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovaonvq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3791,"timings":{"blocked":3357,"dns":0,"connect":0,"send":0,"wait":434,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomrgkzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.617Z","timestamp":1784473458617,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomrgkzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1980,"timings":{"blocked":1469,"dns":0,"connect":0,"send":0,"wait":511,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolseklq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.394Z","timestamp":1784473455394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolseklq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 00:06:52 GMT\r\netag: W/\"1b-6551ce2ccb399\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovwbdvn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.709Z","timestamp":1784473455709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovwbdvn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:44:24 GMT\r\netag: W/\"1b-6553334031f82\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoboanol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.997Z","timestamp":1784473455997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoboanol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:52:07 GMT\r\netag: W/\"1b-6554d4b82bed0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icookrgmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.633Z","timestamp":1784473457633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icookrgmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 10:57:39 GMT\r\netag: W/\"1b-65653b9d00109\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4712,"timings":{"blocked":4075,"dns":0,"connect":0,"send":0,"wait":637,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouzix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.191Z","timestamp":1784473455191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouzix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Jun 2026 21:29:17 GMT\r\netag: W/\"6a39a92d-47f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1151,"size_decoded":591,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"e43681a8791d2e14dd91710af26eb140","sha1":"1261a02048e80b15e9b5f6d062e7b7bb6195c5cf","sha256":"ab96b37fc7c6c78fc8115f5d7fe441dd3bd07f3344081fd122eaeb406523fdb1","sha512":"6418f7f4a00f7390c04a4bcc3da798ab123d4061d0878a18911c1957789de76aae435c8597175da413a2ea3016dc61437c271d296a792a6a79b1d17cd770eb3e","ssdeep":"","tlshash":"212123a29c5c2181833098d833a72b146b4cb21166451ce6f66f6c0cfff7e58439a7bd","first_seen":"2026-07-19T15:05:15.481972Z","last_seen":"2026-07-19T15:05:15.481972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoskpgyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.693Z","timestamp":1784473455693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoskpgyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:43:24 GMT\r\netag: W/\"1b-6553330723877\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotpjole/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.801Z","timestamp":1784473455801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotpjole/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 11:39:56 GMT\r\netag: W/\"1b-6553aaf38549c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1023,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoagaygn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.706Z","timestamp":1784473456706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoagaygn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:06 GMT\r\netag: W/\"1b-655a6c1eea6db\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7504,"timings":{"blocked":7040,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorblaea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.926Z","timestamp":1784473457926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorblaea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:47 GMT\r\netag: W/\"1b-6567b870f97e7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6537,"timings":{"blocked":5944,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoksnvyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.923Z","timestamp":1784473458923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoksnvyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 05:07:12 GMT\r\netag: W/\"1b-656c787891150\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoela2b7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.910Z","timestamp":1784473455910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoela2b7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:29:30 GMT\r\netag: W/\"1b-65549a04adc90\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqaiais/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.236Z","timestamp":1784473456236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqaiais/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:43:56 GMT\r\netag: W/\"1b-6558ce213b2e0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocjjgqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.031Z","timestamp":1784473457031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocjjgqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:24 GMT\r\netag: W/\"1b-655be30619d01\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7192,"timings":{"blocked":6781,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobfkjfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.352Z","timestamp":1784473457352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobfkjfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:55 GMT\r\netag: W/\"1b-655faa86237af\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4004,"timings":{"blocked":3608,"dns":0,"connect":0,"send":0,"wait":396,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohqfgmv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.347Z","timestamp":1784473458347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohqfgmv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:18 GMT\r\netag: W/\"1b-65683a3275648\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4946,"timings":{"blocked":4470,"dns":0,"connect":0,"send":0,"wait":476,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icownzvak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.683Z","timestamp":1784473455683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icownzvak/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:42:56 GMT\r\netag: W/\"1b-655332ebca8e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxlgvuy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.008Z","timestamp":1784473456008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxlgvuy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 11:06:15 GMT\r\netag: W/\"1b-6554e54975977\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoguevof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.596Z","timestamp":1784473456596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoguevof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:21 GMT\r\netag: W/\"1b-655a6bf4001c5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomambro/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.013Z","timestamp":1784473457013,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomambro/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:14 GMT\r\netag: W/\"1b-655be2fd0a7b6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovmwmvn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.654Z","timestamp":1784473457654,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovmwmvn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3767,"timings":{"blocked":3163,"dns":0,"connect":0,"send":0,"wait":604,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopvcyqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.067Z","timestamp":1784473458067,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopvcyqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3084,"timings":{"blocked":2520,"dns":0,"connect":0,"send":0,"wait":564,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnyxig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.138Z","timestamp":1784473458138,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnyxig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:41 GMT\r\netag: W/\"1b-6567b8ddcdd20\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofzdyna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.546Z","timestamp":1784473456546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofzdyna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:05 GMT\r\netag: W/\"1b-655a6be44e894\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoznvzvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.924Z","timestamp":1784473456924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoznvzvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:30 GMT\r\netag: W/\"1b-655be2d31e158\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4083,"timings":{"blocked":3681,"dns":0,"connect":0,"send":0,"wait":402,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomluzmy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.962Z","timestamp":1784473458962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomluzmy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:54:07 GMT\r\netag: W/\"1b-656c9dc7c51e4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6070,"timings":{"blocked":5635,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolvsbea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.085Z","timestamp":1784473459085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolvsbea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 10:29:03 GMT\r\netag: W/\"1b-656e0245f75ba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4946,"timings":{"blocked":4678,"dns":0,"connect":0,"send":0,"wait":268,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovo5fix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.108Z","timestamp":1784473459108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovo5fix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:44:52 GMT\r\netag: W/\"1b-656e2e0a890c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4829,"timings":{"blocked":4501,"dns":0,"connect":0,"send":0,"wait":328,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorzwhgi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.141Z","timestamp":1784473459141,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorzwhgi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3076,"timings":{"blocked":2480,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgxuro/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.227Z","timestamp":1784473459227,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgxuro/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconmnngk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.071Z","timestamp":1784473456071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconmnngk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:33:59 GMT\r\netag: W/\"1b-65558c6bb1c6d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":982,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowccgvz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.871Z","timestamp":1784473456871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowccgvz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:08 GMT\r\netag: W/\"1b-655be2bdd9c2c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovmssiq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.054Z","timestamp":1784473459054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovmssiq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 01:54:35 GMT\r\netag: W/\"1b-656d8f48aec6d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6055,"timings":{"blocked":5618,"dns":0,"connect":0,"send":0,"wait":437,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoulzthb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.934Z","timestamp":1784473455934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoulzthb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:37 GMT\r\netag: W/\"1b-6554c6f8d83b5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofovdkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.552Z","timestamp":1784473456552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofovdkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:07 GMT\r\netag: W/\"1b-655a6be666ab2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogcyrti/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.408Z","timestamp":1784473458408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogcyrti/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:52 GMT\r\netag: W/\"1b-65683a52b927b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4750,"timings":{"blocked":4446,"dns":0,"connect":0,"send":0,"wait":304,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/yvlkwnfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.745Z","timestamp":1784473458745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/yvlkwnfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 04:26:42 GMT\r\netag: W/\"1b-6569ebb04e361\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3723,"timings":{"blocked":3291,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoppbowm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.795Z","timestamp":1784473455795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoppbowm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 11:15:52 GMT\r\netag: W/\"1b-6553a5924644a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyddkou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.861Z","timestamp":1784473456861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyddkou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:03 GMT\r\netag: W/\"1b-655be2b9344f8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5352,"timings":{"blocked":4957,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoecnarz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.458Z","timestamp":1784473457458,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoecnarz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":2702,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoylkith/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.853Z","timestamp":1784473458853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoylkith/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 11:41:47 GMT\r\netag: W/\"1b-656b8ecd6a76a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4881,"timings":{"blocked":4300,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icote4d6x/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.270Z","timestamp":1784473459270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icote4d6x/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:03:38 GMT\r\netag: W/\"1b-656f3e7567271\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5222,"timings":{"blocked":4789,"dns":0,"connect":0,"send":0,"wait":433,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogmufyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.268Z","timestamp":1784473455268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogmufyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 14:05:56 GMT\r\netag: W/\"1b-655005fda13e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyejrin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.658Z","timestamp":1784473455658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyejrin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:22:15 GMT\r\netag: W/\"1b-65532e4c4a031\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosqzupb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.360Z","timestamp":1784473456360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosqzupb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:56 GMT\r\netag: W/\"1b-655a6ba2d6c94\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xdzhfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.612Z","timestamp":1784473457612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xdzhfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 00:24:56 GMT\r\netag: W/\"1b-6564ae2ff7a9f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6604,"timings":{"blocked":58,"dns":0,"connect":0,"send":6049,"wait":497,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xdfasg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.633Z","timestamp":1784473458633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xdfasg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 21:04:49 GMT\r\netag: W/\"1b-6568470dee1c6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5485,"timings":{"blocked":3855,"dns":0,"connect":0,"send":1168,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovfzvyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.215Z","timestamp":1784473455215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovfzvyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 13:19:41 GMT\r\netag: W/\"1b-654eb9c9975a9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozy0s54/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.371Z","timestamp":1784473455371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozy0s54/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 16:17:33 GMT\r\netag: W/\"1b-65516546783be\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoacejit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.094Z","timestamp":1784473457094,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoacejit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3346,"timings":{"blocked":2797,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotxpbxk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.276Z","timestamp":1784473457276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotxpbxk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 00:54:20 GMT\r\netag: W/\"1b-655e6b6f4597e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7370,"timings":{"blocked":6850,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico48xebk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.204Z","timestamp":1784473456204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico48xebk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 17:58:48 GMT\r\netag: W/\"1b-6557c53aed462\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorizojo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.946Z","timestamp":1784473456946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorizojo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:39 GMT\r\netag: W/\"1b-655be2dbd2983\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7199,"timings":{"blocked":6789,"dns":0,"connect":0,"send":0,"wait":410,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodapnoy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.227Z","timestamp":1784473457227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodapnoy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 02:12:04 GMT\r\netag: W/\"1b-655d3af1a2a0f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomdfsnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.383Z","timestamp":1784473457383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomdfsnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 01:58:51 GMT\r\netag: W/\"1b-6560fd95de4ff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4155,"timings":{"blocked":3598,"dns":0,"connect":0,"send":0,"wait":557,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojkqulr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.562Z","timestamp":1784473457562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojkqulr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 15:24:35 GMT\r\netag: W/\"1b-6562f38bbdc0b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7298,"timings":{"blocked":6985,"dns":0,"connect":0,"send":0,"wait":313,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaphjkx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.928Z","timestamp":1784473457928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaphjkx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:48 GMT\r\netag: W/\"1b-6567b8722c226\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3833,"timings":{"blocked":3431,"dns":0,"connect":0,"send":0,"wait":402,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomjsdlf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.978Z","timestamp":1784473457978,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomjsdlf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2206,"timings":{"blocked":1720,"dns":0,"connect":0,"send":0,"wait":486,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozxazgg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.165Z","timestamp":1784473458165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozxazgg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:52 GMT\r\netag: W/\"1b-6567b8e85cf16\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoziroap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.895Z","timestamp":1784473455895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoziroap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 00:51:12 GMT\r\netag: W/\"1b-65545bcfe35b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconrettq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.184Z","timestamp":1784473456184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconrettq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 09:47:52 GMT\r\netag: W/\"1b-6557577f7429b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico8r9p4pg5ht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.190Z","timestamp":1784473456190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico8r9p4pg5ht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 13:21:39 GMT\r\netag: W/\"1b-6557874871fc8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoozzin8/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.210Z","timestamp":1784473457210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoozzin8/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 22:38:08 GMT\r\netag: W/\"1b-655d0b200ede6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotjnkua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.948Z","timestamp":1784473457948,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotjnkua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoysfzji/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.262Z","timestamp":1784473458262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoysfzji/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:26 GMT\r\netag: W/\"1b-65683a00aa53b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozcvplm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.297Z","timestamp":1784473458297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozcvplm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:49 GMT\r\netag: W/\"1b-65683a16ed8b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5476,"timings":{"blocked":5189,"dns":0,"connect":0,"send":0,"wait":287,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqwfror/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.405Z","timestamp":1784473458405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqwfror/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:50 GMT\r\netag: W/\"1b-65683a516c25c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5947,"timings":{"blocked":5636,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorqmjwi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.647Z","timestamp":1784473456647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorqmjwi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:39 GMT\r\netag: W/\"1b-655a6c0493455\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_bnqgdj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.605Z","timestamp":1784473457605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_bnqgdj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 23:02:40 GMT\r\netag: W/\"1e-65649bcc8a0aa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6959,"timings":{"blocked":50,"dns":0,"connect":0,"send":6577,"wait":332,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotyunmq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.843Z","timestamp":1784473457843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotyunmq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:02 GMT\r\netag: W/\"1b-6567b846d3772\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6542,"timings":{"blocked":5952,"dns":0,"connect":0,"send":0,"wait":590,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocajtwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.990Z","timestamp":1784473457990,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocajtwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodccrbj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.182Z","timestamp":1784473458182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodccrbj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:57 GMT\r\netag: W/\"1b-6567b8ed34332\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocuxaom/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.399Z","timestamp":1784473458399,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocuxaom/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2900,"timings":{"blocked":2345,"dns":0,"connect":0,"send":0,"wait":555,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolmcazv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.446Z","timestamp":1784473458446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolmcazv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:14 GMT\r\netag: W/\"1b-65683a67dd432\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3590,"timings":{"blocked":3185,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohkwtdi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.789Z","timestamp":1784473458789,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohkwtdi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 09:53:31 GMT\r\netag: W/\"1b-656a34bcadc7c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_jce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.138Z","timestamp":1784473456138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_jce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 10:02:35 GMT\r\netag: W/\"1a-656b78a08d4fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26,"size_decoded":318,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"07c5f55cc33611643a5f65e9d3e0dcb4","sha1":"f9679e4070b3edb552e956199d41aae90d4bb668","sha256":"46f2e186e891da1736c872a2d78014d47a84a02bfa8a292d1a2a059e3f4a4208","sha512":"426bc9136d4d2b69cafb672e7325ef8f8e6f6d769451686059076455c09402c20ead597c5ccaaad2d1cbc706f0e2c1ad2ce06a4e48e3c88d58f207c5503dc97c","ssdeep":"","tlshash":"33800000000c8000e0800c03300f30222020a80800ae023320080a8c8cc38300bc0b20","first_seen":"2026-06-22T00:02:14.616459Z","last_seen":"2026-07-21T15:25:14.141524Z","times_seen":32,"resource_available":false,"data":null}},"time_used":983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogwkugs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.136Z","timestamp":1784473457136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogwkugs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:05 GMT\r\netag: W/\"1b-655be32dcddaa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icottiqsv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.178Z","timestamp":1784473457178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icottiqsv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:25 GMT\r\netag: W/\"1b-655be34115641\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xazhgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.712Z","timestamp":1784473457712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xazhgj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 03:01:00 GMT\r\netag: W/\"1b-656612efe1144\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouwhyis/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.757Z","timestamp":1784473457757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouwhyis/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:00 GMT\r\netag: W/\"1b-6566d9ddf8f60\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6868,"timings":{"blocked":6581,"dns":0,"connect":0,"send":0,"wait":287,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofdmbla/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.021Z","timestamp":1784473458021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofdmbla/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:34 GMT\r\netag: W/\"1b-6567b89e78f1b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5jmeena/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.806Z","timestamp":1784473458806,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5jmeena/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 19:27:41 GMT\r\netag: W/\"1b-656ab512a3a42\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xprxow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.206Z","timestamp":1784473459206,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xprxow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobvmjlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.216Z","timestamp":1784473455216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobvmjlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 13:19:41 GMT\r\netag: W/\"1b-654eb9c9a3129\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokkhnyt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.373Z","timestamp":1784473457373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokkhnyt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 08:58:00 GMT\r\netag: W/\"1b-6560196876977\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6368,"timings":{"blocked":6030,"dns":0,"connect":0,"send":0,"wait":338,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozbzfvj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.462Z","timestamp":1784473457462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozbzfvj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:32:03 GMT\r\netag: W/\"1b-65618b1d89829\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":4836,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeghuup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.809Z","timestamp":1784473458809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeghuup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 20:22:31 GMT\r\netag: W/\"1b-656ac1544d9b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohvmvge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.868Z","timestamp":1784473458868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohvmvge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 12:02:30 GMT\r\netag: W/\"1b-656b936ebf749\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":1641,"dns":0,"connect":0,"send":0,"wait":306,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoriywdv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.017Z","timestamp":1784473459017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoriywdv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:36 GMT\r\netag: W/\"1b-656d670d66f7e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqsavdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.100Z","timestamp":1784473459100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqsavdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:20:41 GMT\r\netag: W/\"1b-656e28a394295\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofeuwko/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.164Z","timestamp":1784473459164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofeuwko/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 22:37:07 GMT\r\netag: W/\"1b-656ea502b2d28\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4321,"timings":{"blocked":4010,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopmyhdx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.521Z","timestamp":1784473455521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopmyhdx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 19:10:00 GMT\r\netag: W/\"1b-6552cdaf61cd1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico3bpqn3/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.205Z","timestamp":1784473456205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico3bpqn3/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 17:58:52 GMT\r\netag: W/\"1b-6557c53e8c083\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotcednl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.131Z","timestamp":1784473457131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotcednl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:02 GMT\r\netag: W/\"1b-655be32b22430\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconhzpgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.365Z","timestamp":1784473457365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconhzpgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:04:42 GMT\r\netag: W/\"1b-655fe5424fda7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7172,"timings":{"blocked":6730,"dns":0,"connect":0,"send":0,"wait":442,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozprkih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.557Z","timestamp":1784473457557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozprkih/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 14:09:08 GMT\r\netag: W/\"1b-6562e2adfcea3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6646,"timings":{"blocked":6136,"dns":0,"connect":0,"send":0,"wait":510,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovjxzpl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.105Z","timestamp":1784473456105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovjxzpl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 03:27:07 GMT\r\netag: W/\"1b-6555c0874742a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoidjdpc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.703Z","timestamp":1784473456703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoidjdpc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:04 GMT\r\netag: W/\"1b-655a6c1cd43fd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohoukqs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.267Z","timestamp":1784473458267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohoukqs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:30 GMT\r\netag: W/\"1b-65683a048f659\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2318,"timings":{"blocked":1986,"dns":0,"connect":0,"send":0,"wait":332,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xygzfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.752Z","timestamp":1784473458752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xygzfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:11:03 GMT\r\netag: W/\"1b-656a106bc7336\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqkhjek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.264Z","timestamp":1784473459264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqkhjek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 08:10:08 GMT\r\netag: W/\"1b-656f251709575\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5155,"timings":{"blocked":4806,"dns":0,"connect":0,"send":0,"wait":349,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojeuxsd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.691Z","timestamp":1784473456691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojeuxsd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:58 GMT\r\netag: W/\"1b-655a6c171a6e2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovwyqsm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.900Z","timestamp":1784473456900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovwyqsm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:19 GMT\r\netag: W/\"1b-655be2c8b21f2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3348,"timings":{"blocked":2745,"dns":0,"connect":0,"send":0,"wait":603,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xdaing/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.788Z","timestamp":1784473457788,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xdaing/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotklhyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.420Z","timestamp":1784473458420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotklhyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:58 GMT\r\netag: W/\"1b-65683a5941078\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5804,"timings":{"blocked":5375,"dns":0,"connect":0,"send":0,"wait":429,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icordskfv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.832Z","timestamp":1784473458832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icordskfv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:44:08 GMT\r\netag: W/\"1b-656b4c4571dbd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoacfucd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.619Z","timestamp":1784473456619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoacfucd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:30 GMT\r\netag: W/\"1b-655a6bfc4839d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqfggzs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.314Z","timestamp":1784473457314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqfggzs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 16:22:05 GMT\r\netag: W/\"1b-655f3acd40b2c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoglnwnn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.538Z","timestamp":1784473458538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoglnwnn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:47 GMT\r\netag: W/\"1b-65683a8757da5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5736,"timings":{"blocked":5319,"dns":0,"connect":0,"send":0,"wait":417,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodurouy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.554Z","timestamp":1784473458554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodurouy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:54 GMT\r\netag: W/\"1b-65683a8e41622\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2760,"timings":{"blocked":2352,"dns":0,"connect":0,"send":0,"wait":408,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodzrvvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.210Z","timestamp":1784473455210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodzrvvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 12:10:52 GMT\r\netag: W/\"1b-654eaa67bd683\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoklpqzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.630Z","timestamp":1784473455630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoklpqzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:20:34 GMT\r\netag: W/\"1b-65532dec9ae0f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobwzzkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.784Z","timestamp":1784473455784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobwzzkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 08:23:44 GMT\r\netag: W/\"1b-65537f19153bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoonxkzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.392Z","timestamp":1784473456392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoonxkzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:08 GMT\r\netag: W/\"1b-655a6bae48789\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxsqgkh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.873Z","timestamp":1784473456873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxsqgkh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:09 GMT\r\netag: W/\"1b-655be2beef1aa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojfsuvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.244Z","timestamp":1784473458244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojfsuvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:17 GMT\r\netag: W/\"1b-656839f85a65e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5232,"timings":{"blocked":3931,"dns":0,"connect":0,"send":720,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovrkymk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.103Z","timestamp":1784473459103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovrkymk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:44:42 GMT\r\netag: W/\"1b-656e2e0127aec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozqurmx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.232Z","timestamp":1784473459232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozqurmx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:17 GMT\r\netag: W/\"1b-656f1d139706d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3949,"timings":{"blocked":3369,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosndlmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.880Z","timestamp":1784473455880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosndlmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:19:39 GMT\r\netag: W/\"1b-6553f6e2b5061\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icos3wl46/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.760Z","timestamp":1784473456760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icos3wl46/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 05:51:27 GMT\r\netag: W/\"1b-655ae84033d69\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolmjpgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.873Z","timestamp":1784473457873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolmjpgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:13 GMT\r\netag: W/\"1b-6567b8512dda7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqdfxhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.342Z","timestamp":1784473458342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqdfxhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:14 GMT\r\netag: W/\"1b-65683a2f3d2c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7002,"timings":{"blocked":6528,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotoavyf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.043Z","timestamp":1784473459043,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotoavyf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 23:07:18 GMT\r\netag: W/\"1b-656d69e3f3c17\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoawmxfw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.062Z","timestamp":1784473456062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoawmxfw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:23:45 GMT\r\netag: W/\"1b-65557cb8ce4d3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":811,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyeuitq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.753Z","timestamp":1784473456753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyeuitq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 01:59:16 GMT\r\netag: W/\"1b-655ab45a00550\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogjulij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.887Z","timestamp":1784473456887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogjulij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:14 GMT\r\netag: W/\"1b-655be2c34a55f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6799,"timings":{"blocked":6206,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoblbtde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.368Z","timestamp":1784473457368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoblbtde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:16:24 GMT\r\netag: W/\"1b-655fe7e07463b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomiqlrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.664Z","timestamp":1784473457664,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomiqlrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozsruby/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.029Z","timestamp":1784473458029,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozsruby/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosorreg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.993Z","timestamp":1784473458993,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosorreg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:24 GMT\r\netag: W/\"1b-656d511a30765\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowyvrqo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.064Z","timestamp":1784473459064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowyvrqo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 03:56:58 GMT\r\netag: W/\"1b-656daaa2ad134\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5940,"timings":{"blocked":5347,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoujngth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.264Z","timestamp":1784473455264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoujngth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 13:52:24 GMT\r\netag: W/\"1b-655002f726261\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosdgvwy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.834Z","timestamp":1784473456834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosdgvwy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:48 GMT\r\netag: W/\"1b-655be2ab1227c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojlxkxg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.920Z","timestamp":1784473456920,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojlxkxg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2588,"timings":{"blocked":1978,"dns":0,"connect":0,"send":0,"wait":610,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokgketa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.248Z","timestamp":1784473457248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokgketa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:42 GMT\r\netag: W/\"1b-655deb709363b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoalgmyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.885Z","timestamp":1784473457885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoalgmyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:21 GMT\r\netag: W/\"1b-6567b858d9b7f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6739,"timings":{"blocked":6514,"dns":0,"connect":0,"send":0,"wait":225,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodqrlnw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.999Z","timestamp":1784473457999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodqrlnw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:23 GMT\r\netag: W/\"1b-6567b89411dc5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6553,"timings":{"blocked":4249,"dns":0,"connect":0,"send":1825,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooljnfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.295Z","timestamp":1784473458295,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooljnfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojuxeaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.315Z","timestamp":1784473456315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojuxeaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 09:54:02 GMT\r\netag: W/\"1b-6559dc9b9e047\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokukvgb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.553Z","timestamp":1784473456553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokukvgb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:08 GMT\r\netag: W/\"1b-655a6be6ea811\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorvnjjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.329Z","timestamp":1784473457329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorvnjjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 23:05:00 GMT\r\netag: W/\"1b-655f94dc70f76\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/mewppnip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.639Z","timestamp":1784473457639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/mewppnip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 14:32:22 GMT\r\netag: W/\"1b-65656b9a7948d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5909,"timings":{"blocked":4177,"dns":0,"connect":0,"send":1271,"wait":461,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icootkrxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.372Z","timestamp":1784473458372,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icootkrxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqeetxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.328Z","timestamp":1784473457328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqeetxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 21:29:11 GMT\r\netag: W/\"1b-655f7f72446d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxguwte/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.364Z","timestamp":1784473457364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxguwte/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:04:40 GMT\r\netag: W/\"1b-655fe540e9747\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5696,"timings":{"blocked":5406,"dns":0,"connect":0,"send":0,"wait":290,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_lhoxxt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.550Z","timestamp":1784473457550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_lhoxxt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 11:34:54 GMT\r\netag: W/\"1e-6562c03586a51\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobwnmkc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.545Z","timestamp":1784473458545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobwnmkc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:51 GMT\r\netag: W/\"1b-65683a8b29643\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvfifo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.576Z","timestamp":1784473456576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvfifo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:14 GMT\r\netag: W/\"1b-655a6beca54cc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyewqid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.160Z","timestamp":1784473457160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyewqid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:16 GMT\r\netag: W/\"1b-655be33885033\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaxjaeq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.882Z","timestamp":1784473457882,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaxjaeq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:19 GMT\r\netag: W/\"1b-6567b856fc2e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconpoqyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.968Z","timestamp":1784473457968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconpoqyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:08 GMT\r\netag: W/\"1b-6567b88515ed3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiyeeho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.184Z","timestamp":1784473458184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiyeeho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:58 GMT\r\netag: W/\"1b-6567b8ee67d11\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5764,"timings":{"blocked":5419,"dns":0,"connect":0,"send":0,"wait":345,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorabxzl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.526Z","timestamp":1784473455526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorabxzl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 19:12:57 GMT\r\netag: W/\"1b-6552ce57c4186\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico0a29ez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.012Z","timestamp":1784473456012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico0a29ez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 11:32:04 GMT\r\netag: W/\"1b-6554eb0f16124\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xoroeo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.792Z","timestamp":1784473457792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xoroeo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:28:57 GMT\r\netag: W/\"1b-6567834818372\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5403,"timings":{"blocked":4862,"dns":0,"connect":0,"send":0,"wait":541,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiodlir/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.197Z","timestamp":1784473455197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiodlir/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 07:40:14 GMT\r\netag: W/\"1b-654e6de9b2d78\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogqmcws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.483Z","timestamp":1784473455483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogqmcws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 17:26:14 GMT\r\netag: W/\"1b-6552b67e000de\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqknmtc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.470Z","timestamp":1784473456470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqknmtc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:31 GMT\r\netag: W/\"1b-655a6bc422374\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooxklkh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.106Z","timestamp":1784473457106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooxklkh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:49 GMT\r\netag: W/\"1b-655be31e1572c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6744,"timings":{"blocked":6137,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohcypjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.162Z","timestamp":1784473458162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohcypjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:50 GMT\r\netag: W/\"1b-6567b8e685438\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/tom_4k7lsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.167Z","timestamp":1784473459167,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/tom_4k7lsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 01:09:04 GMT\r\netag: W/\"1e-656ec6f9b7ca9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoggufew/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.931Z","timestamp":1784473456931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoggufew/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:34 GMT\r\netag: W/\"1b-655be2d71a96f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6420,"timings":{"blocked":6110,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocjvyht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.526Z","timestamp":1784473457526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocjvyht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 02:54:26 GMT\r\netag: W/\"1b-65624bdff9875\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4760,"timings":{"blocked":4178,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolsusqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.535Z","timestamp":1784473457535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolsusqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 05:06:28 GMT\r\netag: W/\"1b-656269632c605\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5742,"timings":{"blocked":5482,"dns":0,"connect":0,"send":0,"wait":260,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozjzxcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.588Z","timestamp":1784473457588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozjzxcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 09:26:10 GMT\r\netag: W/\"1b-6563e54bf214b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5686,"timings":{"blocked":5374,"dns":0,"connect":0,"send":0,"wait":312,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyriwlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.341Z","timestamp":1784473458341,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyriwlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbkmjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.953Z","timestamp":1784473458953,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbkmjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico13zebo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.300Z","timestamp":1784473456300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico13zebo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 07:14:44 GMT\r\netag: W/\"1b-6559b8ffb1e02\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":337,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosudarj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.874Z","timestamp":1784473456874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosudarj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:10 GMT\r\netag: W/\"1b-655be2bf78cc8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopexdrf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.978Z","timestamp":1784473456978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopexdrf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:56 GMT\r\netag: W/\"1b-655be2ebf477d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3413,"timings":{"blocked":2951,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogrjwsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.044Z","timestamp":1784473457044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogrjwsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:27 GMT\r\netag: W/\"1b-655be309493da\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6096,"timings":{"blocked":5633,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoimnukf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.400Z","timestamp":1784473457400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoimnukf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:06:38 GMT\r\netag: W/\"1b-6560ff53555bb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozquduf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.519Z","timestamp":1784473457519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozquduf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 23:29:29 GMT\r\netag: W/\"1b-65621e10d5854\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6760,"timings":{"blocked":6316,"dns":0,"connect":0,"send":0,"wait":444,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofpcjex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.074Z","timestamp":1784473458074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofpcjex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:04 GMT\r\netag: W/\"1b-6567b8baced80\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5831,"timings":{"blocked":5368,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xhhibo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.787Z","timestamp":1784473458787,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xhhibo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqifrgk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.099Z","timestamp":1784473456099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqifrgk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 02:29:27 GMT\r\netag: W/\"1b-6555b3a34b950\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1319,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojokptk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.950Z","timestamp":1784473456950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojokptk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:41 GMT\r\netag: W/\"1b-655be2ddb7f1f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoexmtsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.031Z","timestamp":1784473457031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoexmtsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:23 GMT\r\netag: W/\"1b-655be305901e3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6778,"timings":{"blocked":6265,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyvkenq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.669Z","timestamp":1784473458669,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyvkenq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico0nfb8j/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.671Z","timestamp":1784473458671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico0nfb8j/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 06:37:10 GMT\r\netag: W/\"17-6568c6fbf5493\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":315,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a19e3bc0254d603062b20c34e7fd8e53","sha1":"4cc1ec85e2a4388bbe51f3b04868e5441f192cce","sha256":"160b84fe002bf455a12286cb4d945ddace98cd56e26df360e382c4431b86cc82","sha512":"1861ddd632656c9c8e5368fe9e4096244d482bc1b6bcba2bc1b5c8bb389c1c1be6460e168a3617e094ce526c3acbd34249c32fdbda7dfd166cdf8e547fb2ec90","ssdeep":"","tlshash":"da7000a0c20820c203a0c0028308220e0000b028c2083800e00a002c08c02000080ea8","first_seen":"2026-07-09T06:45:58.550132Z","last_seen":"2026-07-21T15:25:14.060743Z","times_seen":26,"resource_available":false,"data":null}},"time_used":4965,"timings":{"blocked":4268,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeicnrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.225Z","timestamp":1784473459225,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeicnrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowripus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.781Z","timestamp":1784473455781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowripus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 08:03:05 GMT\r\netag: W/\"1b-65537a7af697a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoerxief/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.472Z","timestamp":1784473456472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoerxief/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:32 GMT\r\netag: W/\"1b-655a6bc528e93\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopuqwmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.037Z","timestamp":1784473457037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopuqwmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:24 GMT\r\netag: W/\"1b-655be306a2880\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5615,"timings":{"blocked":5034,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodhxekg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.546Z","timestamp":1784473457546,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodhxekg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2362,"timings":{"blocked":1810,"dns":0,"connect":0,"send":0,"wait":552,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotqhnzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.235Z","timestamp":1784473455235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotqhnzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 06:36:50 GMT\r\netag: W/\"1b-654fa19bcbe5f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoekvpyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.504Z","timestamp":1784473456504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoekvpyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:47 GMT\r\netag: W/\"1b-655a6bd3349c5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocnvkob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.706Z","timestamp":1784473456706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocnvkob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:06 GMT\r\netag: W/\"1b-655a6c1e63a9b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icod3mtjb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.232Z","timestamp":1784473457232,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icod3mtjb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 10:31:42 GMT\r\netag: W/\"1b-655daa9f49e65\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokxiuib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.579Z","timestamp":1784473457579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokxiuib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 00:14:35 GMT\r\netag: W/\"1b-65636a021a201\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4321,"timings":{"blocked":3805,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xcvgfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.796Z","timestamp":1784473457796,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xcvgfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:56:08 GMT\r\netag: W/\"1b-6567895beee32\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojgribe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.474Z","timestamp":1784473457474,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojgribe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icow331oa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.497Z","timestamp":1784473457497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icow331oa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:02:39 GMT\r\netag: W/\"1b-6561fd3e47d0a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6922,"timings":{"blocked":6629,"dns":0,"connect":0,"send":0,"wait":293,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqdbkfc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.197Z","timestamp":1784473458197,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqdbkfc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3605,"timings":{"blocked":3009,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohwvkev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.527Z","timestamp":1784473456527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohwvkev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:58 GMT\r\netag: W/\"1b-655a6bdd5273b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopyxkfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.548Z","timestamp":1784473456548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopyxkfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:05 GMT\r\netag: W/\"1b-655a6be4d54d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozaxdby/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.074Z","timestamp":1784473457074,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozaxdby/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2461,"timings":{"blocked":1871,"dns":0,"connect":0,"send":0,"wait":590,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icollzcfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.665Z","timestamp":1784473457665,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icollzcfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:30 GMT\r\netag: W/\"1b-6565a91a1a112\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojneamp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.379Z","timestamp":1784473456379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojneamp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:03 GMT\r\netag: W/\"1b-655a6ba99364e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoifzhdi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.256Z","timestamp":1784473457256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoifzhdi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 16:13:54 GMT\r\netag: W/\"1b-655df71c22302\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_uaxcbk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.629Z","timestamp":1784473457629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_uaxcbk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 10:55:04 GMT\r\netag: W/\"1e-65653b08e50dd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":5432,"timings":{"blocked":4132,"dns":0,"connect":0,"send":604,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocrauti/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.195Z","timestamp":1784473458195,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocrauti/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3008,"timings":{"blocked":2452,"dns":0,"connect":0,"send":0,"wait":556,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotngynr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.562Z","timestamp":1784473458562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotngynr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:59 GMT\r\netag: W/\"1b-65683a9294ce0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":428,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowxrvqc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.959Z","timestamp":1784473458959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowxrvqc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:55 GMT\r\netag: W/\"1b-656c9576fb8e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4086,"timings":{"blocked":3499,"dns":0,"connect":0,"send":0,"wait":587,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofytxfz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.212Z","timestamp":1784473459212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofytxfz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 04:59:45 GMT\r\netag: W/\"1b-656efa894c438\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5955,"timings":{"blocked":5491,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-testnet-rpc.publicnode.com/","fqdn":"bsc-testnet-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:27.541Z","timestamp":1784473467541,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-testnet-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thelightrays.com/\r\nOrigin: https://thelightrays.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohvpybl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.346Z","timestamp":1784473455346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohvpybl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 09:43:27 GMT\r\netag: W/\"1b-65510d2fe08dc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoplyloj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.867Z","timestamp":1784473456867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoplyloj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:06 GMT\r\netag: W/\"1b-655be2bc282b1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6179,"timings":{"blocked":5784,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopqzszs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.312Z","timestamp":1784473457312,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopqzszs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3912,"timings":{"blocked":3316,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxttha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.056Z","timestamp":1784473458056,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxttha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ximoof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.628Z","timestamp":1784473458628,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ximoof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoymxzdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.322Z","timestamp":1784473456322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoymxzdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 12:33:03 GMT\r\netag: W/\"1b-655a0025f1841\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxnsqbt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.324Z","timestamp":1784473456324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxnsqbt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 13:11:38 GMT\r\netag: W/\"1b-655a08c59ace1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiworqm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.166Z","timestamp":1784473457166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiworqm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:20 GMT\r\netag: W/\"1b-655be33bbb46c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4880,"timings":{"blocked":4295,"dns":0,"connect":0,"send":0,"wait":585,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoovqyju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.406Z","timestamp":1784473457406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoovqyju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:10:00 GMT\r\netag: W/\"1b-65610014299ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorsgvxk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.160Z","timestamp":1784473458160,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorsgvxk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3633,"timings":{"blocked":3037,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoktuvfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.216Z","timestamp":1784473458216,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoktuvfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokdvgsu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.282Z","timestamp":1784473455282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokdvgsu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 21:26:27 GMT\r\netag: W/\"1b-65506873afffa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosftnqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.346Z","timestamp":1784473456346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosftnqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:59:49 GMT\r\netag: W/\"1b-655a64021545e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoicsbaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.973Z","timestamp":1784473456973,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoicsbaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2471,"timings":{"blocked":1948,"dns":0,"connect":0,"send":0,"wait":523,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxhzzwy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.213Z","timestamp":1784473457213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxhzzwy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 23:15:41 GMT\r\netag: W/\"1b-655d1384f3b2e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoagzarb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.254Z","timestamp":1784473457254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoagzarb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 16:04:46 GMT\r\netag: W/\"1b-655df5115d2c6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7429,"timings":{"blocked":6955,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyhjmxc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.977Z","timestamp":1784473457977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyhjmxc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:12 GMT\r\netag: W/\"1b-6567b888f90af\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowkyuoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.855Z","timestamp":1784473458855,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowkyuoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xmayxz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.423Z","timestamp":1784473457423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xmayxz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:39:30 GMT\r\netag: W/\"1b-65611414a76fa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/zjq3h64a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.786Z","timestamp":1784473457786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/zjq3h64a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 03:41:15 GMT\r\netag: W/\"1b-65675dcc2cf48\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopjkuke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.883Z","timestamp":1784473457883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopjkuke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:20 GMT\r\netag: W/\"1b-6567b857967a1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4303,"timings":{"blocked":3825,"dns":0,"connect":0,"send":0,"wait":478,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobkwfkt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.998Z","timestamp":1784473457998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobkwfkt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:23 GMT\r\netag: W/\"1b-6567b893788a5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5854,"timings":{"blocked":5415,"dns":0,"connect":0,"send":0,"wait":439,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolggpkt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.286Z","timestamp":1784473458286,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolggpkt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icochsebl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.391Z","timestamp":1784473458391,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icochsebl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2136,"timings":{"blocked":1623,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozfazdc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.443Z","timestamp":1784473458443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozfazdc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:12 GMT\r\netag: W/\"1b-65683a65f6ef3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4408,"timings":{"blocked":3827,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxjmlhr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.304Z","timestamp":1784473457304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxjmlhr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 07:44:42 GMT\r\netag: W/\"1b-655ec72833382\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolkuflg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.561Z","timestamp":1784473457561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolkuflg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 15:22:33 GMT\r\netag: W/\"1b-6562f3172eec0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6628,"timings":{"blocked":6132,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/phhzgvce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.702Z","timestamp":1784473458702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/phhzgvce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 17:46:00 GMT\r\netag: W/\"1b-65695c7b1eff7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5080,"timings":{"blocked":4560,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoktnulw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.807Z","timestamp":1784473455807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoktnulw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 14:42:44 GMT\r\netag: W/\"1b-6553d3cf57b83\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofqfzer/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.964Z","timestamp":1784473456964,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofqfzer/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3365,"timings":{"blocked":2810,"dns":0,"connect":0,"send":0,"wait":555,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyrqqat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.052Z","timestamp":1784473457052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyrqqat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:30 GMT\r\netag: W/\"1b-655be30beef94\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3302,"timings":{"blocked":2710,"dns":0,"connect":0,"send":0,"wait":592,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoanufcf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.108Z","timestamp":1784473457108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoanufcf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:49 GMT\r\netag: W/\"1b-655be31eb78eb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5440,"timings":{"blocked":4912,"dns":0,"connect":0,"send":0,"wait":528,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconglxet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.252Z","timestamp":1784473457252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconglxet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 16:04:40 GMT\r\netag: W/\"1b-655df50b4e64b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogusjyp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.914Z","timestamp":1784473456914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogusjyp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:24 GMT\r\netag: W/\"1b-655be2cd99006\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeibdrk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.595Z","timestamp":1784473457595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeibdrk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 17:37:23 GMT\r\netag: W/\"1b-6564531859cea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6786,"timings":{"blocked":27,"dns":0,"connect":0,"send":6559,"wait":200,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozud5hb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.847Z","timestamp":1784473458847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozud5hb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 07:55:41 GMT\r\netag: W/\"1b-656b5c4376a1c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3729,"timings":{"blocked":3323,"dns":0,"connect":0,"send":0,"wait":406,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoegljys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.992Z","timestamp":1784473458992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoegljys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:23 GMT\r\netag: W/\"1b-656d5119b27c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4803,"timings":{"blocked":4107,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogomflg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.189Z","timestamp":1784473455189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogomflg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 21:09:22 GMT\r\netag: W/\"1b-654de0e7b2147\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico4pmvrq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.348Z","timestamp":1784473455348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico4pmvrq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 11:59:55 GMT\r\netag: W/\"1b-65512baffa5af\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocimgtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.751Z","timestamp":1784473455751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocimgtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:55:03 GMT\r\netag: W/\"1b-6553507450284\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobyglop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.747Z","timestamp":1784473456747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobyglop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 21:22:37 GMT\r\netag: W/\"1b-655a7683e716f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoelfxrj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.843Z","timestamp":1784473456843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoelfxrj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:54 GMT\r\netag: W/\"1b-655be2b0e174d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodxxeey/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.640Z","timestamp":1784473457640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodxxeey/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 15:09:22 GMT\r\netag: W/\"1b-656573dfa9aec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7266,"timings":{"blocked":6787,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooylqpr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.858Z","timestamp":1784473457858,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooylqpr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouzelyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.371Z","timestamp":1784473458371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouzelyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:32 GMT\r\netag: W/\"1b-65683a3ffe3c3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4910,"timings":{"blocked":4467,"dns":0,"connect":0,"send":0,"wait":443,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouzgozz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.640Z","timestamp":1784473456640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouzgozz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:36 GMT\r\netag: W/\"1b-655a6c01f9417\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokmsuuf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.721Z","timestamp":1784473456721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokmsuuf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:14 GMT\r\netag: W/\"1b-655a6c2631b54\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icormbkvn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.300Z","timestamp":1784473457300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icormbkvn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 06:38:40 GMT\r\netag: W/\"1b-655eb865ad0c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojycfos/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.760Z","timestamp":1784473457760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojycfos/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:02 GMT\r\netag: W/\"1b-6566d9dff5bff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4294,"timings":{"blocked":3789,"dns":0,"connect":0,"send":0,"wait":505,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbdqml/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.199Z","timestamp":1784473458199,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbdqml/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:06 GMT\r\netag: W/\"1b-6567b8f5ae1ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoingh4s/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.655Z","timestamp":1784473458655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoingh4s/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 01:28:46 GMT\r\netag: W/\"1b-6568820cdd2a3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icookdxab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.876Z","timestamp":1784473458876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icookdxab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:11:16 GMT\r\netag: W/\"25-656bcb09a1f1a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":328,"mime_type":"text/css","magic":"ASCII text","md5":"2b49e39d76662b45d47900a9e98609af","sha1":"4b60be2796d10472573570912292a448da94ad64","sha256":"5c48f3a7f27ac4f230a07708e98c978c90672cf075bc543cdf72481e7067fa7f","sha512":"2594a52b467cfbfab5ed6ba95c893019810fd79679f4024a6f37cb3104dad65c54bb5929dc1eb4737a55c8ed5dca20bcb40bb7039f7d1fedd3d5263d0889225a","ssdeep":"","tlshash":"4b800403001d0004d1400d43f00f301151147414515d4134140455cc5cc3d3117d4f50","first_seen":"2026-07-19T15:05:15.485346Z","last_seen":"2026-07-19T15:19:18.254046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3479,"timings":{"blocked":3177,"dns":0,"connect":0,"send":0,"wait":302,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icookjnas/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.940Z","timestamp":1784473458940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icookjnas/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:50 GMT\r\netag: W/\"1b-656c95727d2a3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3851,"timings":{"blocked":3282,"dns":0,"connect":0,"send":0,"wait":569,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icod57402/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.253Z","timestamp":1784473455253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icod57402/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:57:26 GMT\r\netag: W/\"21-654fe944e31c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":325,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"5878e28aa30547c694244abe96064b0d","sha1":"5d27071b4795cee5db4fc1e37c94a244162d8c7f","sha256":"7e94d33ee39869c3ef6cc647465b9a1e370af005443dee11afd0e5281d1649e9","sha512":"9a1f6e54ef6c2d142e15e72e22bba3db7625dc95d5463c84a5a5dc9a15f424791ed538cb286d1be1bdf7dc63a673e25d0bfccfc581d849a2cd334318f311b295","ssdeep":"","tlshash":"898004d1410410c30370c4014700f51f00047034d1043c11d005414dc5c05410750d5d","first_seen":"2026-07-19T15:05:15.486784Z","last_seen":"2026-07-19T15:05:15.486784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqqfnfv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.134Z","timestamp":1784473457134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqqfnfv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:05 GMT\r\netag: W/\"1b-655be32d4716b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozvpcen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.193Z","timestamp":1784473457193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozvpcen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:33 GMT\r\netag: W/\"1b-655be34892611\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosihcqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.911Z","timestamp":1784473457911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosihcqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:38 GMT\r\netag: W/\"1b-6567b868cac4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6671,"timings":{"blocked":6410,"dns":0,"connect":0,"send":0,"wait":261,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooiojda/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.053Z","timestamp":1784473458053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooiojda/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:53 GMT\r\netag: W/\"1b-6567b8b010d8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico23zfeu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.845Z","timestamp":1784473458845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico23zfeu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 07:55:41 GMT\r\netag: W/\"1b-656b5c436dd7c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3525,"timings":{"blocked":3225,"dns":0,"connect":0,"send":0,"wait":300,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-testnet-rpc.publicnode.com/","fqdn":"bsc-testnet-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:27.384Z","timestamp":1784473467384,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-testnet-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://thelightrays.com/\r\nOrigin: https://thelightrays.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Sun, 19 Jul 2026 15:04:27 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1da9e633aa056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconxcwte/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.742Z","timestamp":1784473456742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconxcwte/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:25 GMT\r\netag: W/\"1b-655a6c30af40a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohnutqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.177Z","timestamp":1784473457177,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohnutqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/jquery.parallax.js?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.312Z","timestamp":1784473459312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/js/jquery.parallax.js?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 428\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: \"382-6346cfe7703cc-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":898,"size_decoded":801,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (898), with no line terminators","md5":"2263a15d623dacad22a4d1eee8f2fa82","sha1":"2b50b47ccf6e2e0e8625b6956e8117381bd4c4c7","sha256":"729937c36d78cfec1fd6e3d8529885be8254ccc286bc5b16e721896bd106bbc3","sha512":"332c4db504e3cdd7d7a34eda933b99cef9285775e0a0f3a14dfa326fd8304a40fa672a8216a226f7f2a4a9ccc1ce5533d157a2546104fa7fbcb01b305e069259","ssdeep":"","tlshash":"a511c0a8bd10604bf95b617f81ffb701803bd880a505c915549bf8e80a1cf2a7afbd24","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-07-21T15:37:03.174606Z","times_seen":2161,"resource_available":true,"data":null}},"time_used":5249,"timings":{"blocked":4884,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico8jsxbud9t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.126Z","timestamp":1784473456126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico8jsxbud9t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 13:11:58 GMT\r\netag: W/\"1b-65564340c330b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosjfhdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.253Z","timestamp":1784473456253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosjfhdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 16:59:00 GMT\r\netag: W/\"1b-6558f9ba36e71\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeltldj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.684Z","timestamp":1784473457684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeltldj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:34 GMT\r\netag: W/\"1b-6565a91d68bf5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojttihp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.024Z","timestamp":1784473459024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojttihp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:41 GMT\r\netag: W/\"1b-656d67128f475\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4253,"timings":{"blocked":4096,"dns":0,"connect":0,"send":0,"wait":157,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xthgqh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.119Z","timestamp":1784473459119,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xthgqh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1579,"timings":{"blocked":1095,"dns":0,"connect":0,"send":0,"wait":484,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosuni/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.131Z","timestamp":1784473456131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosuni/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 05:17:53 GMT\r\netag: \"0-65612a123e58c\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":303,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":1015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1015,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconaagmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.876Z","timestamp":1784473457876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconaagmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:15 GMT\r\netag: W/\"1b-6567b85321da5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":397,"dns":0,"connect":0,"send":0,"wait":483,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohnicxh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.226Z","timestamp":1784473458226,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohnicxh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogxdyfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.270Z","timestamp":1784473458270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogxdyfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:32 GMT\r\netag: W/\"1b-65683a06af578\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocyqena/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.338Z","timestamp":1784473458338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocyqena/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:12 GMT\r\netag: W/\"1b-65683a2ca904a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6801,"timings":{"blocked":6419,"dns":0,"connect":0,"send":0,"wait":382,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqgjskn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.541Z","timestamp":1784473458541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqgjskn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:48 GMT\r\netag: W/\"1b-65683a88b2884\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4676,"timings":{"blocked":4365,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotvnjpo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.554Z","timestamp":1784473458554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotvnjpo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:55 GMT\r\netag: W/\"1b-65683a8edca82\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5665,"timings":{"blocked":5295,"dns":0,"connect":0,"send":0,"wait":370,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoadtyfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.650Z","timestamp":1784473458650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoadtyfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 00:03:55 GMT\r\netag: W/\"1b-65686f1619178\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2855,"timings":{"blocked":2420,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icown54sf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.477Z","timestamp":1784473455477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icown54sf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 17:02:32 GMT\r\netag: W/\"1b-6552b13131856\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorzzlbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.245Z","timestamp":1784473456245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorzzlbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:46:23 GMT\r\netag: W/\"1b-6558ceacdf39f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocxedze/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.440Z","timestamp":1784473457440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocxedze/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:18:53 GMT\r\netag: W/\"1b-6561882cb121d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobyqipf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.019Z","timestamp":1784473458019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobyqipf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:33 GMT\r\netag: W/\"1b-6567b89d2eddc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5495,"timings":{"blocked":4959,"dns":0,"connect":0,"send":0,"wait":536,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqohvfh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.666Z","timestamp":1784473458666,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqohvfh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":23,"size_decoded":314,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a1794d5f51590c81c7efd0afe72658c5","sha1":"d0f5d8780ceb6fea8f697f1928e3c5239f6589ce","sha256":"f3cf7fae3a69aaa17f685d5743def45fb86058f167a05730ba36bb3893cbb35e","sha512":"ecc6a593558f015342d85449760664afd6452cce906c0a04de55275a62ba85bf862ce4ce764233847b93914be300af35d5db6fb7f7daa8aba1d212e39ab94e38","ssdeep":"","tlshash":"da7000a0820820c203a0c0028300222e0000b028c2283822e00a000c08c02000080ea8","first_seen":"2026-07-16T12:32:05.772484Z","last_seen":"2026-07-21T15:25:14.07438Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1790,"timings":{"blocked":1059,"dns":0,"connect":0,"send":0,"wait":731,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xtemdi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.966Z","timestamp":1784473458966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xtemdi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 09:12:08 GMT\r\netag: W/\"1b-656caf379fb5d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5094,"timings":{"blocked":4811,"dns":0,"connect":0,"send":0,"wait":283,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokaxrlw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.524Z","timestamp":1784473456524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokaxrlw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:56 GMT\r\netag: W/\"1b-655a6bdbc309c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopjphle/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.988Z","timestamp":1784473456988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopjphle/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:01 GMT\r\netag: W/\"1b-655be2f0c5dd2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7242,"timings":{"blocked":6787,"dns":0,"connect":0,"send":0,"wait":455,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoejijtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.194Z","timestamp":1784473457194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoejijtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:34 GMT\r\netag: W/\"1b-655be3491f010\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofclptf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.939Z","timestamp":1784473457939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofclptf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:55 GMT\r\netag: W/\"1b-6567b8793bbff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7001,"timings":{"blocked":6557,"dns":0,"connect":0,"send":0,"wait":444,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocclzne/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.158Z","timestamp":1784473459158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocclzne/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 22:29:23 GMT\r\netag: W/\"1b-656ea3480f5f2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5240,"timings":{"blocked":4846,"dns":0,"connect":0,"send":0,"wait":394,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xrpikr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.274Z","timestamp":1784473459274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xrpikr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:18:31 GMT\r\netag: W/\"1b-656f41c8b4b66\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5820,"timings":{"blocked":5326,"dns":0,"connect":0,"send":0,"wait":494,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovtwdci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.179Z","timestamp":1784473455179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovtwdci/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 16:59:51 GMT\r\netag: W/\"1b-654da92254719\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogfhyxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.383Z","timestamp":1784473456383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogfhyxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:05 GMT\r\netag: W/\"1b-655a6bab22cec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeeyxnc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.255Z","timestamp":1784473457255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeeyxnc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 16:10:37 GMT\r\netag: W/\"1b-655df65fa25be\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaaidlq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.484Z","timestamp":1784473457484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaaidlq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 16:28:54 GMT\r\netag: W/\"1b-6561c00e42ba2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico9qfb2y/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.539Z","timestamp":1784473457539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico9qfb2y/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 06:16:14 GMT\r\netag: W/\"1b-656278fb4b1d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6144,"timings":{"blocked":5737,"dns":0,"connect":0,"send":0,"wait":407,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyartol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.661Z","timestamp":1784473455661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyartol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:22:23 GMT\r\netag: W/\"1b-65532e53fdb15\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqsycjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.720Z","timestamp":1784473455720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqsycjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:26:34 GMT\r\netag: W/\"1b-65534a1643643\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokmzxth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.961Z","timestamp":1784473456961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokmzxth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:48 GMT\r\netag: W/\"1b-655be2e3d7530\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovlxvhi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.446Z","timestamp":1784473457446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovlxvhi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:22:58 GMT\r\netag: W/\"1b-6561891645f66\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocgtuuj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.931Z","timestamp":1784473457931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocgtuuj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:50 GMT\r\netag: W/\"1b-6567b8741c3a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6536,"timings":{"blocked":5943,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoicoahw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.068Z","timestamp":1784473458068,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoicoahw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icognjvbt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.395Z","timestamp":1784473458395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icognjvbt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:44 GMT\r\netag: W/\"1b-65683a4bd869e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xhfouh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.785Z","timestamp":1784473458785,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xhfouh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojpgleo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.290Z","timestamp":1784473455290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojpgleo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 21:47:18 GMT\r\netag: W/\"1b-65506d1d23f89\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodotymf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.832Z","timestamp":1784473455832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodotymf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:46:59 GMT\r\netag: W/\"1b-6553ef94b3963\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohibmvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.857Z","timestamp":1784473458857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohibmvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 11:41:49 GMT\r\netag: W/\"1b-656b8ecf896ec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5408,"timings":{"blocked":5013,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomytbpp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.602Z","timestamp":1784473456602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomytbpp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:24 GMT\r\netag: W/\"1b-655a6bf694442\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojifobg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.004Z","timestamp":1784473457004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojifobg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:09 GMT\r\netag: W/\"1b-655be2f8381c1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4898,"timings":{"blocked":4317,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoppfdjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.381Z","timestamp":1784473458381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoppfdjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:37 GMT\r\netag: W/\"1b-65683a4509401\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomapmwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.084Z","timestamp":1784473459084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomapmwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 10:27:14 GMT\r\netag: W/\"1b-656e01deace2b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5219,"timings":{"blocked":4888,"dns":0,"connect":0,"send":0,"wait":331,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icornzfbp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.865Z","timestamp":1784473455865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icornzfbp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:18:37 GMT\r\netag: W/\"1b-6553f6a786a39\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolmawsh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.340Z","timestamp":1784473456340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolmawsh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:54:26 GMT\r\netag: W/\"1b-655a62ce3fb32\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7145,"timings":{"blocked":6511,"dns":0,"connect":0,"send":0,"wait":634,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icop3ked0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.815Z","timestamp":1784473456815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icop3ked0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 16:44:52 GMT\r\netag: W/\"1b-655b7a4c6a7a6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":676,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoppjisn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.442Z","timestamp":1784473457442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoppjisn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:20:17 GMT\r\netag: W/\"1b-6561887c358ff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":526,"dns":0,"connect":0,"send":0,"wait":484,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoldzwbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.816Z","timestamp":1784473458816,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoldzwbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 04:42:55 GMT\r\netag: W/\"1b-656b312d035a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxnjnkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.323Z","timestamp":1784473458323,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxnjnkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:03 GMT\r\netag: W/\"1b-65683a247086d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovpeflf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.448Z","timestamp":1784473458448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovpeflf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:15 GMT\r\netag: W/\"1b-65683a6919ab2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6082,"timings":{"blocked":5615,"dns":0,"connect":0,"send":0,"wait":467,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icox30pj9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.410Z","timestamp":1784473455410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icox30pj9/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 05:54:22 GMT\r\netag: W/\"1b-65521bd84c4bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofhejwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.220Z","timestamp":1784473456220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofhejwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 02:38:12 GMT\r\netag: W/\"1b-65583952c8a98\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaprafd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.923Z","timestamp":1784473457923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaprafd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:45 GMT\r\netag: W/\"1b-6567b86fbd168\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocizqwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.456Z","timestamp":1784473458456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocizqwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:20 GMT\r\netag: W/\"1b-65683a6da0d90\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5358,"timings":{"blocked":5125,"dns":0,"connect":0,"send":0,"wait":233,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoidsmhx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.874Z","timestamp":1784473458874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoidsmhx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:11:00 GMT\r\netag: W/\"25-656bcaf9a52c5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":329,"mime_type":"text/css","magic":"ASCII text","md5":"18ec6579901c0cf69c5d2b8abbf28bd0","sha1":"d42068bc014df3ae738af05e599458187eb68bc2","sha256":"5a3a1520bf548f1eab6c8ef3209d8f4d62785028abf6fafedb4622ab7df497f5","sha512":"35b132752060944e154d747e1f96393fa40c9abba0b05eab3ad05f562c934b25ef18b4fdc000d45039134e607820ac08aa42722e0aa5273bc5fd82e83d5c580b","ssdeep":"","tlshash":"0a800400400d0405d1413d43741f34115115551570dd5030145c054c4cc3d3003c1350","first_seen":"2026-07-19T15:05:15.489885Z","last_seen":"2026-07-19T15:05:15.489885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5009,"timings":{"blocked":4489,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconwhdgp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.436Z","timestamp":1784473457436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconwhdgp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:15:05 GMT\r\netag: W/\"1b-6561875283a8e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6871,"timings":{"blocked":6646,"dns":0,"connect":0,"send":0,"wait":225,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ypqhwojz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.479Z","timestamp":1784473457479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ypqhwojz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 15:31:13 GMT\r\netag: W/\"1b-6561b32a197b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6665,"timings":{"blocked":6116,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowovrjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.973Z","timestamp":1784473455973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowovrjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:50 GMT\r\netag: W/\"1b-6554c704a6b0d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":969,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2uitp2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.514Z","timestamp":1784473457514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2uitp2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 22:58:19 GMT\r\netag: W/\"1b-656217196c314\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5632,"timings":{"blocked":4940,"dns":0,"connect":0,"send":0,"wait":692,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogzbm3r/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.769Z","timestamp":1784473457769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogzbm3r/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 20:10:44 GMT\r\netag: W/\"1b-6566f91a26440\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5558,"timings":{"blocked":5106,"dns":0,"connect":0,"send":0,"wait":452,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopgitlj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.120Z","timestamp":1784473457120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopgitlj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:57 GMT\r\netag: W/\"1b-655be325cb13b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaegrrs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.174Z","timestamp":1784473457174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaegrrs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:23 GMT\r\netag: W/\"1b-655be33ef18a5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorukcue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.366Z","timestamp":1784473457366,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorukcue/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3887,"timings":{"blocked":3291,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowdummj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.743Z","timestamp":1784473457743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowdummj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 12:25:49 GMT\r\netag: W/\"1b-6566912f0ba23\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6088,"timings":{"blocked":5655,"dns":0,"connect":0,"send":0,"wait":433,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofacaju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.047Z","timestamp":1784473458047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofacaju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:48 GMT\r\netag: W/\"1b-6567b8ab6b64e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4268,"timings":{"blocked":3733,"dns":0,"connect":0,"send":0,"wait":535,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobqlrcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.617Z","timestamp":1784473456617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobqlrcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:29 GMT\r\netag: W/\"1b-655a6bfb3e99e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7271,"timings":{"blocked":6867,"dns":0,"connect":0,"send":0,"wait":404,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowb7sgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.759Z","timestamp":1784473456759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowb7sgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 03:04:37 GMT\r\netag: W/\"1b-655ac2f617ace\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomlxgai/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.818Z","timestamp":1784473456818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomlxgai/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 18:14:36 GMT\r\netag: W/\"1b-655b8e5b212a1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqmgoaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.332Z","timestamp":1784473457332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqmgoaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:51 GMT\r\netag: W/\"1b-655faa82ba6fa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7378,"timings":{"blocked":4427,"dns":0,"connect":0,"send":2399,"wait":552,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolzifar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.258Z","timestamp":1784473458258,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolzifar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3591,"timings":{"blocked":3104,"dns":0,"connect":0,"send":0,"wait":487,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodclgnt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.263Z","timestamp":1784473458263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodclgnt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:26 GMT\r\netag: W/\"1b-65683a017861a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3850,"timings":{"blocked":3558,"dns":0,"connect":0,"send":0,"wait":292,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoecmhiv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.300Z","timestamp":1784473458300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoecmhiv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:51 GMT\r\netag: W/\"1b-65683a190e772\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4119,"timings":{"blocked":3639,"dns":0,"connect":0,"send":0,"wait":480,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowukihg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.837Z","timestamp":1784473455837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowukihg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:16:54 GMT\r\netag: W/\"1b-6553f645510bb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqcxfdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.317Z","timestamp":1784473456317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqcxfdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 12:33:02 GMT\r\netag: W/\"1b-655a00255a261\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovaqxyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.965Z","timestamp":1784473456965,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovaqxyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2471,"timings":{"blocked":1932,"dns":0,"connect":0,"send":0,"wait":539,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotbhjfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.261Z","timestamp":1784473457261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotbhjfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:14 GMT\r\netag: W/\"1b-655e03ecb3fff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozbxtvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.541Z","timestamp":1784473457541,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozbxtvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3846,"timings":{"blocked":3521,"dns":0,"connect":0,"send":0,"wait":325,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooapyxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.075Z","timestamp":1784473458075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooapyxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:05 GMT\r\netag: W/\"1b-6567b8bb6635f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5831,"timings":{"blocked":5478,"dns":0,"connect":0,"send":0,"wait":353,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocydnmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.348Z","timestamp":1784473458348,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocydnmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3506,"timings":{"blocked":2901,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoujyawc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.475Z","timestamp":1784473456475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoujyawc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:34 GMT\r\netag: W/\"1b-655a6bc6b3711\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobtlffc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.903Z","timestamp":1784473457903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobtlffc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:33 GMT\r\netag: W/\"1b-6567b863fa594\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5490,"timings":{"blocked":5199,"dns":0,"connect":0,"send":0,"wait":291,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowogoex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.932Z","timestamp":1784473457932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowogoex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:51 GMT\r\netag: W/\"1b-6567b874c81a3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4371,"timings":{"blocked":3837,"dns":0,"connect":0,"send":0,"wait":534,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowoxrzs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.257Z","timestamp":1784473458257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowoxrzs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:22 GMT\r\netag: W/\"1b-656839fd1749c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4099,"timings":{"blocked":3596,"dns":0,"connect":0,"send":0,"wait":503,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocjjcwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.626Z","timestamp":1784473458626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocjjcwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:22 GMT\r\netag: W/\"1b-65683aa94e2f6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5268,"timings":{"blocked":4915,"dns":0,"connect":0,"send":0,"wait":353,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozpiwvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.092Z","timestamp":1784473459092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozpiwvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 11:50:35 GMT\r\netag: W/\"1b-656e147ff82ad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/BWLRMBrKH_c?iv_load_policy=3\u0026rel=0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:27.381Z","timestamp":1784473467381,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /embed/BWLRMBrKH_c?iv_load_policy=3\u0026rel=0 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovtjjrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.509Z","timestamp":1784473455509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovtjjrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 19:03:32 GMT\r\netag: W/\"1b-6552cc3d4efa7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiqzlpz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.512Z","timestamp":1784473456512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiqzlpz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:50 GMT\r\netag: W/\"1b-655a6bd64c9a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolexvxr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.921Z","timestamp":1784473456921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolexvxr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:28 GMT\r\netag: W/\"1b-655be2d0cd4fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5320,"timings":{"blocked":4926,"dns":0,"connect":0,"send":0,"wait":394,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokafyvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.189Z","timestamp":1784473457189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokafyvx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:31 GMT\r\netag: W/\"1b-655be346726f6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/qnpkbwmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.380Z","timestamp":1784473457380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/qnpkbwmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 22:44:06 GMT\r\netag: W/\"1b-6560d20ddf65e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobqoimr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.008Z","timestamp":1784473458008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobqoimr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:28 GMT\r\netag: W/\"1b-6567b898402c1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7087,"timings":{"blocked":6636,"dns":0,"connect":0,"send":0,"wait":451,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowrwfgt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.315Z","timestamp":1784473458315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowrwfgt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:59 GMT\r\netag: W/\"1b-65683a20a4d8f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5325,"timings":{"blocked":4758,"dns":0,"connect":0,"send":0,"wait":567,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconggksx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.445Z","timestamp":1784473458445,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconggksx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohbcsox/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.913Z","timestamp":1784473458913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohbcsox/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 23:16:51 GMT\r\netag: W/\"1b-656c2a2914310\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4479,"timings":{"blocked":4168,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/css/joomla-fontawesome.min.css","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.294Z","timestamp":1784473459294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /templates/shaper_strings/css/joomla-fontawesome.min.css HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: W/\"67096c5b-12654\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":75348,"size_decoded":15036,"mime_type":"text/css","magic":"ASCII text, with very long lines (59035)","md5":"f4f0c0b3ba482115cbe0acda0b1fa7d4","sha1":"15ae4a4d9f2a7ac0466f531d460c49fe561a9f9c","sha256":"a3c806cd4f376d28d03e8f4aac9f0ec7837198ebcb3d0cae1ddc6cbfcf8262a6","sha512":"fde438e873420e9b4f3d52065441748226f525f1410fefc1c65762cd28679e3fbf9974dd432130451af037b6161c0c6a6d86ae8c10036d44b049b87e3755ef03","ssdeep":"768:PTUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz2r/Xv5fO:PTU0PxXE4YXJgndFTfy9lQir/f52","tlshash":"1d732eb8e44c01cab731c04bef41b36ca9a6f73dd9910d96f04f691c2ae169852c5fb9","first_seen":"2023-05-07T19:38:36Z","last_seen":"2026-07-21T15:04:43.696693Z","times_seen":102,"resource_available":false,"data":null}},"time_used":4631,"timings":{"blocked":3934,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoumwgcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.185Z","timestamp":1784473455185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoumwgcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 18:03:37 GMT\r\netag: W/\"1b-654db7631dc9e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojkhyba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.397Z","timestamp":1784473456397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojkhyba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:10 GMT\r\netag: W/\"1b-655a6bafdfb27\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofcukaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.744Z","timestamp":1784473456744,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofcukaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_pwgwnr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.426Z","timestamp":1784473457426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_pwgwnr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:45:12 GMT\r\netag: W/\"1e-6561155b8dec6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6314,"timings":{"blocked":6003,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoerahae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.725Z","timestamp":1784473457725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoerahae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:43 GMT\r\netag: W/\"1b-65664f38c511d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6218,"timings":{"blocked":5908,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokhgwul/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.205Z","timestamp":1784473458205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokhgwul/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 12:01:58 GMT\r\netag: W/\"1b-6567cdb80e029\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6620,"timings":{"blocked":6395,"dns":0,"connect":0,"send":0,"wait":225,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozhhwdr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.240Z","timestamp":1784473458240,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozhhwdr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofbtsyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.311Z","timestamp":1784473458311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofbtsyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:57 GMT\r\netag: W/\"1b-65683a1eb5bb0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6310,"timings":{"blocked":5703,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopdrkcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.609Z","timestamp":1784473458609,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopdrkcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:15 GMT\r\netag: W/\"1b-65683aa237bb9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozejkmr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.098Z","timestamp":1784473459098,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozejkmr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 12:52:37 GMT\r\netag: W/\"1b-656e225d94963\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoquiyzb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.280Z","timestamp":1784473458280,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoquiyzb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovsgylq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.561Z","timestamp":1784473458561,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovsgylq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3426,"timings":{"blocked":2990,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icos0uryh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.720Z","timestamp":1784473458720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icos0uryh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 01:40:56 GMT\r\netag: W/\"1b-6569c6a270dc3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icophdmiv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.909Z","timestamp":1784473456909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icophdmiv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:22 GMT\r\netag: W/\"1b-655be2cae980c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xjmkon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.736Z","timestamp":1784473458736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xjmkon/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:33:04 GMT\r\netag: W/\"1b-6569d24a53a32\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconebnlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.336Z","timestamp":1784473457336,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconebnlh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xcslaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.717Z","timestamp":1784473457717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xcslaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 03:52:34 GMT\r\netag: W/\"1b-65661e765f64f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4698,"timings":{"blocked":4114,"dns":0,"connect":0,"send":0,"wait":584,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoklhkwf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.069Z","timestamp":1784473458069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoklhkwf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:02 GMT\r\netag: W/\"1b-6567b8b900ee2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xnsfns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.208Z","timestamp":1784473458208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xnsfns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 14:28:04 GMT\r\netag: W/\"1b-6567ee5fe66e2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5493,"timings":{"blocked":5123,"dns":0,"connect":0,"send":0,"wait":370,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogkhffw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.307Z","timestamp":1784473458307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogkhffw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:56 GMT\r\netag: W/\"1b-65683a1d79530\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5327,"timings":{"blocked":4956,"dns":0,"connect":0,"send":0,"wait":371,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosxpgnp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.232Z","timestamp":1784473455232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosxpgnp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 21:22:09 GMT\r\netag: W/\"1b-654f25a04b5d6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorsnjzw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.749Z","timestamp":1784473456749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorsnjzw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 21:35:34 GMT\r\netag: W/\"1b-655a79697bc52\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobntzqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.460Z","timestamp":1784473457460,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobntzqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":3280,"wait":595,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icow7ii8q/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.025Z","timestamp":1784473456025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icow7ii8q/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 15:36:55 GMT\r\netag: W/\"1b-655521c8fd248\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocgawga/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.161Z","timestamp":1784473456161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocgawga/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:41 GMT\r\netag: W/\"1b-6556c62be8e7b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icognyewi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.661Z","timestamp":1784473456661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icognyewi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:44 GMT\r\netag: W/\"1b-655a6c09ef56f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoidxzwl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.157Z","timestamp":1784473457157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoidxzwl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:15 GMT\r\netag: W/\"1b-655be336e7ed6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovfjiyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.205Z","timestamp":1784473457205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovfjiyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 20:47:13 GMT\r\netag: W/\"1b-655cf255a32e7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolqilkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.071Z","timestamp":1784473458071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolqilkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:03 GMT\r\netag: W/\"1b-6567b8b99e281\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5913,"timings":{"blocked":5495,"dns":0,"connect":0,"send":0,"wait":418,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovjgogp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.833Z","timestamp":1784473458833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovjgogp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:44:09 GMT\r\netag: W/\"1b-656b4c461acdd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6460,"timings":{"blocked":6049,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoluxcbr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.955Z","timestamp":1784473458955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoluxcbr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:54 GMT\r\netag: W/\"1b-656c9575f9be1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T15:04:12.768Z","timestamp":1784473452768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 22720\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nexpires: Wed, 17 Aug 2005 00:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6; path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nlast-modified: Sun, 19 Jul 2026 15:04:14 GMT\r\nx-powered-by: PHP/8.3.32, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":358289,"size_decoded":23380,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"4526007fb2f6ab949879ea07847ddbcd","sha1":"4aab0204baf73914dd3be765a96b75a10bd7b142","sha256":"6077f253de3b23f9571ee904ccb063439b26cbd1bbdcc2e189a1851f3a122291","sha512":"f64645b639a34c3dc85ff1f41f20a0f0988785ffacbf76ccbb1e1bda5c487883fe4461e60d574be3750b4a966737d17d2e145a8576f8e728990827b5c114a192","ssdeep":"6144:Vj7O3MQn/0b9MPAUlaLFUAcsyRtPo9DhZAyAcy07u1XxCAAywJqz/nvf/:Vj7O3MQn/0b9m","tlshash":"9b74f81f8415480c32713aa6f424bb47e4c71d5b6968fe243c7a4e7357abe4402bee6b","first_seen":"2026-07-19T15:05:15.492284Z","last_seen":"2026-07-19T15:05:15.492284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2302,"timings":{"blocked":-1,"dns":10,"connect":142,"send":0,"wait":1718,"receive":142,"ssl":289},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomionum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.362Z","timestamp":1784473456362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomionum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:57 GMT\r\netag: W/\"1b-655a6ba3df6f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxcsfra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.727Z","timestamp":1784473456727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxcsfra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:17 GMT\r\netag: W/\"1b-655a6c294ba71\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxzqtgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.505Z","timestamp":1784473457505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxzqtgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:10:20 GMT\r\netag: W/\"1b-6561fef671968\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6746,"timings":{"blocked":6321,"dns":0,"connect":0,"send":0,"wait":425,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoh2njef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.602Z","timestamp":1784473457602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoh2njef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 21:55:44 GMT\r\netag: W/\"1b-65648cd700577\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4318,"timings":{"blocked":46,"dns":0,"connect":0,"send":3770,"wait":502,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooysbje/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.267Z","timestamp":1784473459267,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooysbje/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icom91iql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.273Z","timestamp":1784473459273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icom91iql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:03:38 GMT\r\netag: W/\"1b-656f3e75a5a70\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4538,"timings":{"blocked":4076,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooantsp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.287Z","timestamp":1784473456287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooantsp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:07 GMT\r\netag: W/\"1b-6559ade8d5399\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorctkbj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.603Z","timestamp":1784473456603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorctkbj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:25 GMT\r\netag: W/\"1b-655a6bf717202\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogqdsdh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.960Z","timestamp":1784473456960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogqdsdh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:47 GMT\r\netag: W/\"1b-655be2e34ab32\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodibbyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.703Z","timestamp":1784473455703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodibbyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:43:54 GMT\r\netag: W/\"1b-655333234d7cd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqfcqqc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.017Z","timestamp":1784473456017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqfcqqc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 13:41:57 GMT\r\netag: W/\"1b-65550816c0ca3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":955,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowvqxef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.999Z","timestamp":1784473456999,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowvqxef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoylsign/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.137Z","timestamp":1784473457137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoylsign/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:06 GMT\r\netag: W/\"1b-655be32e578c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooqayhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.186Z","timestamp":1784473457186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooqayhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:29 GMT\r\netag: W/\"1b-655be344d8479\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiwybuy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.450Z","timestamp":1784473458450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiwybuy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:16 GMT\r\netag: W/\"1b-65683a6a5bef1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4400,"timings":{"blocked":3821,"dns":0,"connect":0,"send":0,"wait":579,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xvitpw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.779Z","timestamp":1784473458779,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xvitpw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":984,"dns":0,"connect":0,"send":0,"wait":731,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotxtsfq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.733Z","timestamp":1784473455733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotxtsfq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:53:47 GMT\r\netag: W/\"1b-6553502bb63b3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopllfax/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.993Z","timestamp":1784473455993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopllfax/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:33:37 GMT\r\netag: W/\"1b-6554d094b843f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomdvyjx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.692Z","timestamp":1784473456692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomdvyjx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:59 GMT\r\netag: W/\"1b-655a6c179d4a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icookf8ec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.567Z","timestamp":1784473457567,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icookf8ec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3809,"timings":{"blocked":3258,"dns":0,"connect":0,"send":0,"wait":551,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohemzjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.605Z","timestamp":1784473458605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohemzjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:14 GMT\r\netag: W/\"1b-65683aa0f2899\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6852,"timings":{"blocked":6539,"dns":0,"connect":0,"send":0,"wait":313,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotn65ef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.926Z","timestamp":1784473458926,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotn65ef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xkipsn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.964Z","timestamp":1784473458964,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xkipsn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2541,"timings":{"blocked":1978,"dns":0,"connect":0,"send":0,"wait":563,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xsswjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.222Z","timestamp":1784473459222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xsswjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 05:16:40 GMT\r\netag: W/\"1b-656efe5146fcf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyuepyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.202Z","timestamp":1784473455202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyuepyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 09:04:07 GMT\r\netag: W/\"1b-654e80a9a71ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoelyqzb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.006Z","timestamp":1784473456006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoelyqzb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 11:06:14 GMT\r\netag: W/\"1b-6554e54879a38\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoanuwtf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.520Z","timestamp":1784473456520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoanuwtf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:54 GMT\r\netag: W/\"1b-655a6bda30b1e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorxgnwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.670Z","timestamp":1784473456670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorxgnwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:48 GMT\r\netag: W/\"1b-655a6c0da1a0c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico6h4c53/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.755Z","timestamp":1784473456755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico6h4c53/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 03:03:26 GMT\r\netag: W/\"1b-655ac2b236be9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeclrwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.085Z","timestamp":1784473457085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeclrwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:40 GMT\r\netag: W/\"1b-655be315860bf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6966,"timings":{"blocked":6736,"dns":0,"connect":0,"send":0,"wait":230,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopjscie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.780Z","timestamp":1784473457780,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopjscie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooclufm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.376Z","timestamp":1784473458376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooclufm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:35 GMT\r\netag: W/\"1b-65683a431ffe1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5730,"timings":{"blocked":5314,"dns":0,"connect":0,"send":0,"wait":416,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqmshun/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.303Z","timestamp":1784473455303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqmshun/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 02:24:03 GMT\r\netag: W/\"1b-6550aaf862222\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokhl30j/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.214Z","timestamp":1784473456214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokhl30j/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 22:18:35 GMT\r\netag: W/\"1b-6557ff4b86bad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofefzxr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.426Z","timestamp":1784473456426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofefzxr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:19 GMT\r\netag: W/\"1b-655a6bb83a5df\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocdkzqh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.299Z","timestamp":1784473457299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocdkzqh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 06:38:39 GMT\r\netag: W/\"1b-655eb865012ca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofjhcnf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.725Z","timestamp":1784473458725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofjhcnf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:22:24 GMT\r\netag: W/\"1b-6569cfe8027a8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3381,"timings":{"blocked":2976,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaxynsu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.136Z","timestamp":1784473459136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaxynsu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:36:49 GMT\r\netag: W/\"1b-656e5479b828d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5414,"timings":{"blocked":5038,"dns":0,"connect":0,"send":0,"wait":376,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico09fbmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.269Z","timestamp":1784473459269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico09fbmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:03:38 GMT\r\netag: W/\"1b-656f3e75009d1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6146,"timings":{"blocked":5819,"dns":0,"connect":0,"send":0,"wait":327,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobvcgad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.775Z","timestamp":1784473455775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobvcgad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 06:56:44 GMT\r\netag: W/\"1b-65536ba65d663\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopmsimk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.265Z","timestamp":1784473456265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopmsimk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 00:24:53 GMT\r\netag: W/\"1b-65595d647d867\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxpyfjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.906Z","timestamp":1784473456906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxpyfjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:20 GMT\r\netag: W/\"1b-655be2c9d234f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoirziyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.925Z","timestamp":1784473456925,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoirziyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2642,"timings":{"blocked":2194,"dns":0,"connect":0,"send":0,"wait":448,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooqyuhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.027Z","timestamp":1784473458027,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooqyuhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3097,"timings":{"blocked":2532,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozvshic/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.427Z","timestamp":1784473458427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozvshic/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:02 GMT\r\netag: W/\"1b-65683a5c5ee17\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5371,"timings":{"blocked":5139,"dns":0,"connect":0,"send":0,"wait":232,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosbpxiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.918Z","timestamp":1784473458918,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosbpxiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoo8xowy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.327Z","timestamp":1784473455327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoo8xowy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 07:14:34 GMT\r\netag: W/\"1b-6550ebe7dba4d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopdnohv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.612Z","timestamp":1784473456612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopdnohv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:27 GMT\r\netag: W/\"1b-655a6bf9b317f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqorks/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.469Z","timestamp":1784473457469,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqorks/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolsyetba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.515Z","timestamp":1784473457515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolsyetba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 23:21:59 GMT\r\netag: W/\"1b-65621c6370f66\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5094,"timings":{"blocked":4784,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohuitrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.931Z","timestamp":1784473458931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohuitrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 06:30:46 GMT\r\netag: W/\"1b-656c8b25ae429\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6531,"timings":{"blocked":6259,"dns":0,"connect":0,"send":0,"wait":272,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogxxqmk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.600Z","timestamp":1784473456600,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogxxqmk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomqqjov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.489Z","timestamp":1784473457489,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomqqjov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3846,"timings":{"blocked":3293,"dns":0,"connect":0,"send":0,"wait":553,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovdxpjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.206Z","timestamp":1784473458206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovdxpjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 12:29:01 GMT\r\netag: W/\"1b-6567d3c3badc2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodyroqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.024Z","timestamp":1784473457024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodyroqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:20 GMT\r\netag: W/\"1b-655be3025ebca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5660,"timings":{"blocked":5312,"dns":0,"connect":0,"send":0,"wait":348,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotdvxep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.644Z","timestamp":1784473457644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotdvxep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:49 GMT\r\netag: W/\"1b-6565a67d97649\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6594,"timings":{"blocked":6098,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xnhuhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.794Z","timestamp":1784473457794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xnhuhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:56:07 GMT\r\netag: W/\"1b-6567895ad8914\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6582,"timings":{"blocked":6072,"dns":0,"connect":0,"send":0,"wait":510,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xyhzij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.749Z","timestamp":1784473458749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xyhzij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:02:16 GMT\r\netag: W/\"1b-656a0e75bfc22\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6498,"timings":{"blocked":6083,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobjspkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.842Z","timestamp":1784473456842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobjspkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:54 GMT\r\netag: W/\"1b-655be2b057c2e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozmdkhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.019Z","timestamp":1784473457019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozmdkhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:16 GMT\r\netag: W/\"1b-655be2ff28791\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodsedye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.521Z","timestamp":1784473457521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodsedye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 00:11:07 GMT\r\netag: W/\"1b-6562275f09c26\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6837,"timings":{"blocked":6606,"dns":0,"connect":0,"send":0,"wait":231,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiodyez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.368Z","timestamp":1784473455368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiodyez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 15:15:53 GMT\r\netag: W/\"1b-6551577da6c6a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocqgwin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.403Z","timestamp":1784473455403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocqgwin/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 04:40:01 GMT\r\netag: W/\"1b-65520b3a4e972\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojfgfna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.274Z","timestamp":1784473457274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojfgfna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 18:54:25 GMT\r\netag: W/\"1b-655e1afc907dc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoomqevb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.384Z","timestamp":1784473457384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoomqevb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 01:58:54 GMT\r\netag: W/\"1b-6560fd985625f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6900,"timings":{"blocked":6673,"dns":0,"connect":0,"send":0,"wait":227,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotivuyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.415Z","timestamp":1784473457415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotivuyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:28:41 GMT\r\netag: W/\"1b-656111aa055d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5670,"timings":{"blocked":5285,"dns":0,"connect":0,"send":0,"wait":385,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xdghuy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.061Z","timestamp":1784473459061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xdghuy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 02:30:49 GMT\r\netag: W/\"1b-656d97620035c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4060,"timings":{"blocked":3479,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopxmhyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.255Z","timestamp":1784473459255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopxmhyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:21 GMT\r\netag: W/\"1b-656f1d1705eea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icornnfjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.281Z","timestamp":1784473455281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icornnfjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 18:37:31 GMT\r\netag: W/\"1b-655042b1d17a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoavxvmj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.809Z","timestamp":1784473455809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoavxvmj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:42:44 GMT\r\netag: W/\"1b-6553eea1a500d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconeulba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.631Z","timestamp":1784473457631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconeulba/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 10:57:39 GMT\r\netag: W/\"1b-65653b9c60e2a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5a49ou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.696Z","timestamp":1784473457696,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5a49ou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2273,"timings":{"blocked":1670,"dns":0,"connect":0,"send":0,"wait":603,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoevqnwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.969Z","timestamp":1784473457969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoevqnwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:08 GMT\r\netag: W/\"1b-6567b885b22d3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogdseis/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.007Z","timestamp":1784473458007,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogdseis/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:27 GMT\r\netag: W/\"1b-6567b8972dc22\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icox9ectm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.208Z","timestamp":1784473456208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icox9ectm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 17:59:02 GMT\r\netag: W/\"1b-6557c548a1165\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoczfapo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.970Z","timestamp":1784473456970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoczfapo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:52 GMT\r\netag: W/\"1b-655be2e7aad07\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokvnsra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.357Z","timestamp":1784473458357,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokvnsra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokvvejr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.544Z","timestamp":1784473456544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokvvejr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:04 GMT\r\netag: W/\"1b-655a6be346dd5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojhwxyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.713Z","timestamp":1784473456713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojhwxyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:10 GMT\r\netag: W/\"1b-655a6c228c1d7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5666,"timings":{"blocked":4541,"dns":0,"connect":0,"send":429,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/gqrardzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.492Z","timestamp":1784473457492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/gqrardzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 16:58:18 GMT\r\netag: W/\"1b-6561c6a0d4311\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5745,"timings":{"blocked":5497,"dns":0,"connect":0,"send":0,"wait":248,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xwmjgf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.971Z","timestamp":1784473458971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xwmjgf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 10:14:59 GMT\r\netag: W/\"1b-656cbd43938cc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosncyzi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.930Z","timestamp":1784473456930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosncyzi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:34 GMT\r\netag: W/\"1b-655be2d68c030\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6788,"timings":{"blocked":6263,"dns":0,"connect":0,"send":0,"wait":525,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofjobme/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.703Z","timestamp":1784473457703,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofjobme/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyj89uv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.797Z","timestamp":1784473458797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyj89uv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 12:39:33 GMT\r\netag: W/\"1b-656a59d8c2244\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5185,"timings":{"blocked":4898,"dns":0,"connect":0,"send":0,"wait":287,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoluxrjn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.355Z","timestamp":1784473455355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoluxrjn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 12:28:55 GMT\r\netag: W/\"1b-6551322bce277\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotoynqg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.621Z","timestamp":1784473455621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotoynqg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:20:04 GMT\r\netag: W/\"1b-65532dd020d57\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxlohdk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.776Z","timestamp":1784473455776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxlohdk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 06:56:45 GMT\r\netag: W/\"1b-65536ba76ddc1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoolhmfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.125Z","timestamp":1784473457125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoolhmfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:00 GMT\r\netag: W/\"1b-655be328c0e35\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogmuyoy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.155Z","timestamp":1784473457155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogmuyoy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:14 GMT\r\netag: W/\"1b-655be335d38f9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvufsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.164Z","timestamp":1784473457164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvufsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:19 GMT\r\netag: W/\"1b-655be33aacc4e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyffdkv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.010Z","timestamp":1784473458010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyffdkv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:30 GMT\r\netag: W/\"1b-6567b899e02ff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4191,"timings":{"blocked":3714,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobvbque/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.820Z","timestamp":1784473458820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobvbque/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:02:50 GMT\r\netag: W/\"1b-656b430a583b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5457,"timings":{"blocked":5041,"dns":0,"connect":0,"send":0,"wait":416,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogwmrrc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.772Z","timestamp":1784473455772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogwmrrc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:56:21 GMT\r\netag: W/\"1b-655350be43c93\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxlkvod/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.926Z","timestamp":1784473455926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxlkvod/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 06:36:15 GMT\r\netag: W/\"1b-6554a8eff7dd8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico89z8ab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.207Z","timestamp":1784473456207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico89z8ab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 17:58:56 GMT\r\netag: W/\"1b-6557c5421d1e4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopkoidr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.637Z","timestamp":1784473456637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopkoidr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:35 GMT\r\netag: W/\"1b-655a6c00e7d18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqwnigw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.950Z","timestamp":1784473457950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqwnigw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:03 GMT\r\netag: W/\"1b-6567b880244d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5373,"timings":{"blocked":4677,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoherodx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.404Z","timestamp":1784473458404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoherodx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:50 GMT\r\netag: W/\"1b-65683a50cfe5c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xovmap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.967Z","timestamp":1784473458967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xovmap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 09:12:09 GMT\r\netag: W/\"1b-656caf382197d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokcdozz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.803Z","timestamp":1784473455803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokcdozz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 14:42:42 GMT\r\netag: W/\"1b-6553d3cd8bc24\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1032,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogfzqng/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.989Z","timestamp":1784473456989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogfzqng/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:02 GMT\r\netag: W/\"1b-655be2f14e951\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":631,"dns":0,"connect":0,"send":0,"wait":161,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogjlvbc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.487Z","timestamp":1784473457487,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogjlvbc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3838,"timings":{"blocked":3231,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-testnet-rpc.publicnode.com/","fqdn":"bsc-testnet-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:27.378Z","timestamp":1784473467378,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-testnet-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nContent-Type: application/json\r\nContent-Length: 137\r\nOrigin: https://thelightrays.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0xDF132E2893824e26Ec8ae8014b4f4FACD54eD67F\",\"data\":\"0x6d4ce63c\"},\"latest\"],\"id\":97,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomjjmui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.614Z","timestamp":1784473455614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomjjmui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:19:45 GMT\r\netag: W/\"1b-65532dbd2d446\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqdlzld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.044Z","timestamp":1784473456044,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqdlzld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:21:52 GMT\r\netag: W/\"1b-65557c4c8e667\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqyepgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.656Z","timestamp":1784473456656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqyepgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:42 GMT\r\netag: W/\"1b-655a6c07c69b1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoklltcz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.048Z","timestamp":1784473458048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoklltcz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:49 GMT\r\netag: W/\"1b-6567b8ac2acce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5844,"timings":{"blocked":4212,"dns":0,"connect":0,"send":1168,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogzzkeh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.097Z","timestamp":1784473458097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogzzkeh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:17 GMT\r\netag: W/\"1b-6567b8c70f8f4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6373,"timings":{"blocked":5823,"dns":0,"connect":0,"send":0,"wait":550,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/images/favicon.ico","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:27.382Z","timestamp":1784473467382,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /templates/shaper_strings/images/favicon.ico HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohieemg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.331Z","timestamp":1784473455331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohieemg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 07:14:36 GMT\r\netag: W/\"1b-6550ebe9b258b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohhujck/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.531Z","timestamp":1784473455531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohhujck/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 19:38:52 GMT\r\netag: W/\"1b-6552d422d0d7a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqkxche/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.601Z","timestamp":1784473455601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqkxche/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:31 GMT\r\netag: W/\"1b-6552f55c5889d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icontspdf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.880Z","timestamp":1784473456880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icontspdf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:11 GMT\r\netag: W/\"1b-655be2c118d04\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyptovv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.076Z","timestamp":1784473458076,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyptovv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokzsczq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.332Z","timestamp":1784473458332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokzsczq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:08 GMT\r\netag: W/\"1b-65683a293b16c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6303,"timings":{"blocked":5656,"dns":0,"connect":0,"send":0,"wait":647,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobqpehq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.436Z","timestamp":1784473458436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobqpehq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:07 GMT\r\netag: W/\"1b-65683a6172af5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6292,"timings":{"blocked":5701,"dns":0,"connect":0,"send":0,"wait":591,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xmmczf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.738Z","timestamp":1784473458738,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xmmczf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2651,"timings":{"blocked":2104,"dns":0,"connect":0,"send":0,"wait":547,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/kpi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.194Z","timestamp":1784473455194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /kpi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 07:25:11 GMT\r\netag: W/\"22-654e6a8cf55d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34,"size_decoded":323,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"fab426e1e75712ef87660ac62553481d","sha1":"7aebf610a73b4c6e71555cd63c4c7e6952bd0c41","sha256":"1593cf25aba779b2b2941069fc9d2647c7019c2e35dd2b790fcf176c700d321d","sha512":"76f8bf16d6ed12c677c6cfd2fa2cc46687cd976ee4313263a85ba4fe33ea7a66929a3d2390bef3e03641fb60e4d861cb15c60b7da9cd680fc9b9b2639bc33ea6","ssdeep":"","tlshash":"d1800003020c8000f8800c82b30f3322080a2a0a008a00b02a220c8eecc283c03c0bce","first_seen":"2026-07-05T03:53:26.674756Z","last_seen":"2026-07-19T15:05:15.49426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofkamhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.220Z","timestamp":1784473455220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofkamhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 17:45:06 GMT\r\netag: W/\"1b-654ef51cc631f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorasdhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.172Z","timestamp":1784473456172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorasdhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 00:55:02 GMT\r\netag: W/\"1b-6556e06699db7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":957,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorsiqam/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.233Z","timestamp":1784473456233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorsiqam/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:43:56 GMT\r\netag: W/\"1b-6558ce207acc0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoijrklv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.396Z","timestamp":1784473457396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoijrklv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:03:25 GMT\r\netag: W/\"1b-6560fe9ae29df\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6886,"timings":{"blocked":6636,"dns":0,"connect":0,"send":0,"wait":250,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotrsblf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.607Z","timestamp":1784473457607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotrsblf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 23:26:05 GMT\r\netag: W/\"1b-6564a1086da0e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5737,"timings":{"blocked":52,"dns":0,"connect":0,"send":5313,"wait":372,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnmrsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.738Z","timestamp":1784473457738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnmrsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 10:17:10 GMT\r\netag: W/\"1b-6566746d9551e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5715,"timings":{"blocked":5345,"dns":0,"connect":0,"send":0,"wait":370,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotgwmep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.229Z","timestamp":1784473458229,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotgwmep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolsdrjw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.863Z","timestamp":1784473455863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolsdrjw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:18:26 GMT\r\netag: W/\"1b-6553f69c6507d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiilnbi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.856Z","timestamp":1784473456856,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiilnbi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:01 GMT\r\netag: W/\"1b-655be2b6f329e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofdtbah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.884Z","timestamp":1784473456884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofdtbah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:12 GMT\r\netag: W/\"1b-655be2c231162\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icormfudq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.259Z","timestamp":1784473457259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icormfudq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:13 GMT\r\netag: W/\"1b-655e03eba1960\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqmtfjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.593Z","timestamp":1784473458593,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqmtfjv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolfkssz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.293Z","timestamp":1784473455293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolfkssz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 01:34:54 GMT\r\netag: W/\"1b-65509ffcae57d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovhruuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.647Z","timestamp":1784473455647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovhruuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:21:12 GMT\r\netag: W/\"1b-65532e10a860a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosnenjo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.278Z","timestamp":1784473456278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosnenjo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 00:24:54 GMT\r\netag: W/\"1b-65595d6580507\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohqvppe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.489Z","timestamp":1784473456489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohqvppe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:40 GMT\r\netag: W/\"1b-655a6bcc78fab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopzfzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.121Z","timestamp":1784473457121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopzfzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:58 GMT\r\netag: W/\"1b-655be3267ec3a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconobvdf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.176Z","timestamp":1784473457176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconobvdf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:24 GMT\r\netag: W/\"1b-655be34006e23\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyfrgaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.016Z","timestamp":1784473459016,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyfrgaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:35 GMT\r\netag: W/\"1b-656d670ce227f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xfvlrr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.062Z","timestamp":1784473459062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xfvlrr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 02:30:50 GMT\r\netag: W/\"1b-656d97625337c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4603,"timings":{"blocked":4083,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobhzxdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.456Z","timestamp":1784473456456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobhzxdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:27 GMT\r\netag: W/\"1b-655a6bc081817\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohylulh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.192Z","timestamp":1784473458192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohylulh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:01 GMT\r\netag: W/\"1b-6567b8f17ddae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xgmatq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.212Z","timestamp":1784473458212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xgmatq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 15:29:39 GMT\r\netag: W/\"1b-6567fc23c8353\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4168,"timings":{"blocked":3643,"dns":0,"connect":0,"send":0,"wait":525,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icok7mb28/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.024Z","timestamp":1784473456024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icok7mb28/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 15:36:53 GMT\r\netag: W/\"1b-655521c7341c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxhffex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.069Z","timestamp":1784473456069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxhffex/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:33:52 GMT\r\netag: W/\"1b-65558c644d330\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":982,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icongfofq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.700Z","timestamp":1784473456700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icongfofq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:03 GMT\r\netag: W/\"1b-655a6c1bc8abe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowgbfux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.032Z","timestamp":1784473458032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowgbfux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:41 GMT\r\netag: W/\"1b-6567b8a517474\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5494,"timings":{"blocked":4975,"dns":0,"connect":0,"send":0,"wait":519,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomikpuq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.230Z","timestamp":1784473459230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomikpuq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:15 GMT\r\netag: W/\"1b-656f1d1151f8f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5465,"timings":{"blocked":5163,"dns":0,"connect":0,"send":0,"wait":302,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconzbrum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.488Z","timestamp":1784473456488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconzbrum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:39 GMT\r\netag: W/\"1b-655a6bcbf524c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoge3gkr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.568Z","timestamp":1784473457568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoge3gkr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 20:13:41 GMT\r\netag: W/\"1b-6563342a64aa1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6734,"timings":{"blocked":6289,"dns":0,"connect":0,"send":0,"wait":445,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_doxspy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.636Z","timestamp":1784473457636,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_doxspy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3773,"timings":{"blocked":3179,"dns":0,"connect":0,"send":0,"wait":594,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbynua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.914Z","timestamp":1784473457914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbynua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:40 GMT\r\netag: W/\"1b-6567b86ab30cd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6187,"timings":{"blocked":5863,"dns":0,"connect":0,"send":0,"wait":324,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogdmzjo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.478Z","timestamp":1784473456478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogdmzjo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:35 GMT\r\netag: W/\"1b-655a6bc7bd110\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoahnruq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.894Z","timestamp":1784473456894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoahnruq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:16 GMT\r\netag: W/\"1b-655be2c5facf8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5929,"timings":{"blocked":5558,"dns":0,"connect":0,"send":0,"wait":371,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojskgtw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.927Z","timestamp":1784473456927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojskgtw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:31 GMT\r\netag: W/\"1b-655be2d445fb6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6106,"timings":{"blocked":5643,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoryajyt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.113Z","timestamp":1784473459113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoryajyt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 14:14:24 GMT\r\netag: W/\"1b-656e34a484fb2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5799,"timings":{"blocked":5357,"dns":0,"connect":0,"send":0,"wait":442,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozoykrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.229Z","timestamp":1784473459229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozoykrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:14 GMT\r\netag: W/\"1b-656f1d10dbcef\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4754,"timings":{"blocked":4429,"dns":0,"connect":0,"send":0,"wait":325,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoireyat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.627Z","timestamp":1784473455627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoireyat/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:20:24 GMT\r\netag: W/\"1b-65532de327ee7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoigrsed/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.058Z","timestamp":1784473456058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoigrsed/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:23:05 GMT\r\netag: W/\"1b-65557c920e626\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotqluzh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.508Z","timestamp":1784473456508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotqluzh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:49 GMT\r\netag: W/\"1b-655a6bd4c01e3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowqfyyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.283Z","timestamp":1784473458283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowqfyyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:40 GMT\r\netag: W/\"1b-65683a0e10fd6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5785,"timings":{"blocked":5434,"dns":0,"connect":0,"send":0,"wait":351,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogxfiln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.673Z","timestamp":1784473458673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogxfiln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 08:56:46 GMT\r\netag: W/\"1b-6568e62fcaf6d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5634,"timings":{"blocked":5228,"dns":0,"connect":0,"send":0,"wait":406,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoieipre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.162Z","timestamp":1784473457162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoieipre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:18 GMT\r\netag: W/\"1b-655be33999611\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolnfhxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.292Z","timestamp":1784473457292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolnfhxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:35 GMT\r\netag: W/\"1b-655e9e016bc96\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotsfcaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.136Z","timestamp":1784473458136,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotsfcaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconkadow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.859Z","timestamp":1784473458859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconkadow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 11:41:49 GMT\r\netag: W/\"1b-656b8ecf8f4ac\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4142,"timings":{"blocked":3579,"dns":0,"connect":0,"send":0,"wait":563,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoa4i1tw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.055Z","timestamp":1784473459055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoa4i1tw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 02:13:24 GMT\r\netag: W/\"1b-656d937cb38b9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoonqany/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.480Z","timestamp":1784473456480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoonqany/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:36 GMT\r\netag: W/\"1b-655a6bc8ca98f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodumtxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.243Z","timestamp":1784473459243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodumtxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:20 GMT\r\netag: W/\"1b-656f1d15eabab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6498,"timings":{"blocked":6176,"dns":0,"connect":0,"send":0,"wait":322,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozmuyzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.624Z","timestamp":1784473455624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozmuyzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:20:15 GMT\r\netag: W/\"1b-65532dd9d341f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkppit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.982Z","timestamp":1784473455982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkppit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:54 GMT\r\netag: W/\"1b-6554c708aeeaa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":966,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoolvsrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.420Z","timestamp":1784473456420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoolvsrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:15 GMT\r\netag: W/\"1b-655a6bb521662\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xgxytl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.425Z","timestamp":1784473457425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xgxytl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:39:30 GMT\r\netag: W/\"1b-65611415709ba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7140,"timings":{"blocked":6686,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxrxkol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.510Z","timestamp":1784473457510,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxrxkol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 22:26:47 GMT\r\netag: W/\"1b-6562100ca5c23\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofcmbft/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.306Z","timestamp":1784473458306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofcmbft/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:55 GMT\r\netag: W/\"1b-65683a1cd7370\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5178,"timings":{"blocked":4634,"dns":0,"connect":0,"send":0,"wait":544,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofwhxtn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.522Z","timestamp":1784473458522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofwhxtn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:44 GMT\r\netag: W/\"1b-65683a84c2b86\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4079,"timings":{"blocked":3653,"dns":0,"connect":0,"send":0,"wait":426,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyxmfkz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.780Z","timestamp":1784473455780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyxmfkz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 08:03:04 GMT\r\netag: W/\"1b-65537a7a48c3b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosyuzdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.437Z","timestamp":1784473457437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosyuzdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:16:29 GMT\r\netag: W/\"1b-656187a2e1dcc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5511,"timings":{"blocked":4814,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoygwxeg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.105Z","timestamp":1784473458105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoygwxeg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:21 GMT\r\netag: W/\"1b-6567b8cb3fd31\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6600,"timings":{"blocked":6154,"dns":0,"connect":0,"send":0,"wait":446,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobevezw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.242Z","timestamp":1784473458242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobevezw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:15 GMT\r\netag: W/\"1b-656839f70593e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6506,"timings":{"blocked":6068,"dns":0,"connect":0,"send":0,"wait":438,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovdppoj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.674Z","timestamp":1784473455674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovdppoj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:42:26 GMT\r\netag: W/\"1b-655332cfae44c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopctguo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.986Z","timestamp":1784473455986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopctguo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:59 GMT\r\netag: W/\"1b-6554c70da6666\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohcbdez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.989Z","timestamp":1784473458989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohcbdez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 20:41:32 GMT\r\netag: W/\"1b-656d494efcc05\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6068,"timings":{"blocked":5633,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqgrib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.484Z","timestamp":1784473456484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqgrib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:38 GMT\r\netag: W/\"1b-655a6bca580ed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojletlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.530Z","timestamp":1784473456530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojletlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:59 GMT\r\netag: W/\"1b-655a6bdeeaa79\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icot69se4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.762Z","timestamp":1784473456762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icot69se4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 06:20:32 GMT\r\netag: W/\"1b-655aeebfe11d5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoknasgu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.116Z","timestamp":1784473459116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoknasgu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 15:48:22 GMT\r\netag: W/\"1b-656e49a5b9c44\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"da3a31f1e9f479606469aff416ab917f","sha1":"4b18dcab9c47547b1d8daa4aa5771c0949303ec7","sha256":"c125bc6783e4f1add7fd69b16ea124ef6bb145b4281d89df17325898ba8fd761","sha512":"407a435483e85b6bc7f80b2cf132d642e62d65837ceb305bcd4e43e5915b30d2990ae66cc3b4b0b059ed3ae6cf1007653b035792e16164f33ff402956677243b","ssdeep":"","tlshash":"b48000a08a2a00c083a0c003a3002a280802b02880200822e02e000c0cc22000a80aae","first_seen":"2026-07-05T03:53:26.747277Z","last_seen":"2026-07-21T15:25:14.068585Z","times_seen":28,"resource_available":false,"data":null}},"time_used":4748,"timings":{"blocked":4052,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoa3z2zl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.212Z","timestamp":1784473456212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoa3z2zl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 19:48:19 GMT\r\netag: W/\"1b-6557ddb530faf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconlppmh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.957Z","timestamp":1784473456957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconlppmh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:45 GMT\r\netag: W/\"1b-655be2e11c1b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7467,"timings":{"blocked":7107,"dns":0,"connect":0,"send":0,"wait":360,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojirytj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.109Z","timestamp":1784473457109,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojirytj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:50 GMT\r\netag: W/\"1b-655be31f3e529\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxamsbq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.207Z","timestamp":1784473457207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxamsbq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 20:47:15 GMT\r\netag: W/\"1b-655cf257377a5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojbhuao/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.851Z","timestamp":1784473458851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojbhuao/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 11:41:46 GMT\r\netag: W/\"1b-656b8ecc9b6ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6005,"timings":{"blocked":5408,"dns":0,"connect":0,"send":0,"wait":597,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoelphtf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.185Z","timestamp":1784473457185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoelphtf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:29 GMT\r\netag: W/\"1b-655be3444e95a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeazios/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.513Z","timestamp":1784473458513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeazios/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:39 GMT\r\netag: W/\"1b-65683a8065888\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6907,"timings":{"blocked":6350,"dns":0,"connect":0,"send":0,"wait":557,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoilnpwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.041Z","timestamp":1784473459041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoilnpwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 23:02:33 GMT\r\netag: W/\"24-656d68d40981e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobwhvfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.213Z","timestamp":1784473455213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobwhvfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 13:19:41 GMT\r\netag: W/\"1b-654eb9c976269\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyb53dr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.352Z","timestamp":1784473455352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyb53dr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 11:59:57 GMT\r\netag: W/\"1b-65512bb1ec66d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopdddui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.675Z","timestamp":1784473456675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopdddui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:51 GMT\r\netag: W/\"1b-655a6c103f8c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoprytqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.477Z","timestamp":1784473457477,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoprytqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2479,"timings":{"blocked":1966,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxirptk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.981Z","timestamp":1784473457981,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxirptk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoizbkqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.274Z","timestamp":1784473458274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoizbkqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:35 GMT\r\netag: W/\"1b-65683a096c837\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4145,"timings":{"blocked":3658,"dns":0,"connect":0,"send":0,"wait":487,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoemffeb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.701Z","timestamp":1784473458701,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoemffeb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyamkfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.942Z","timestamp":1784473458942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyamkfe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:51 GMT\r\netag: W/\"1b-656c9572fc1e3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoosibpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.011Z","timestamp":1784473457011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoosibpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:13 GMT\r\netag: W/\"1b-655be2fbf8118\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":632,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogizupo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.594Z","timestamp":1784473457594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogizupo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 17:37:21 GMT\r\netag: W/\"1b-65645315fd507\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5450,"timings":{"blocked":20,"dns":0,"connect":0,"send":4734,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xfzshf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.714Z","timestamp":1784473457714,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xfzshf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoctdnij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.093Z","timestamp":1784473458093,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoctdnij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xlybhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.131Z","timestamp":1784473459131,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xlybhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolbzscx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.204Z","timestamp":1784473455204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolbzscx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 09:04:29 GMT\r\netag: W/\"1b-654e80bee68fd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozkytaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.812Z","timestamp":1784473457812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozkytaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:13 GMT\r\netag: W/\"1b-65679572286a5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6222,"timings":{"blocked":5883,"dns":0,"connect":0,"send":0,"wait":339,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/yrjepcfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.814Z","timestamp":1784473457814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/yrjepcfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:01:41 GMT\r\netag: W/\"1b-65679802db8d0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyluprn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.000Z","timestamp":1784473458000,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyluprn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xauquc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.719Z","timestamp":1784473457719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xauquc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 03:52:34 GMT\r\netag: W/\"1b-65661e76c5eee\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5657,"timings":{"blocked":5345,"dns":0,"connect":0,"send":0,"wait":312,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icougsloh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.800Z","timestamp":1784473457800,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icougsloh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:09 GMT\r\netag: W/\"1b-6567956e4a2e8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoltdjhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.846Z","timestamp":1784473456846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoltdjhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:56 GMT\r\netag: W/\"1b-655be2b278ae9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolnnrxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.362Z","timestamp":1784473457362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolnnrxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:04:38 GMT\r\netag: W/\"1b-655fe53ef2868\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofvowfl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.363Z","timestamp":1784473458363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofvowfl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:27 GMT\r\netag: W/\"1b-65683a3b964e4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5166,"timings":{"blocked":4469,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotzddmc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.453Z","timestamp":1784473458453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotzddmc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:18 GMT\r\netag: W/\"1b-65683a6c4b0d0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4682,"timings":{"blocked":4425,"dns":0,"connect":0,"send":0,"wait":257,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico4keu97/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.988Z","timestamp":1784473458988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico4keu97/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 19:54:05 GMT\r\netag: W/\"1b-656d3eb4b3054\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4083,"timings":{"blocked":3470,"dns":0,"connect":0,"send":0,"wait":613,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorghpvs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.183Z","timestamp":1784473455183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorghpvs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 17:38:27 GMT\r\netag: W/\"1b-654db1c262c89\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobtqemz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.141Z","timestamp":1784473456141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobtqemz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 19:02:21 GMT\r\netag: W/\"1b-6556919180b7d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":990,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocvpluk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.695Z","timestamp":1784473456695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocvpluk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:00 GMT\r\netag: W/\"1b-655a6c1929c60\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojzqoyw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.911Z","timestamp":1784473456911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojzqoyw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:23 GMT\r\netag: W/\"1b-655be2cbfbeaa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouycwef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.022Z","timestamp":1784473457022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouycwef/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:19 GMT\r\netag: W/\"1b-655be3014964c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7462,"timings":{"blocked":7106,"dns":0,"connect":0,"send":0,"wait":356,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouayubh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.187Z","timestamp":1784473457187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouayubh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:30 GMT\r\netag: W/\"1b-655be34560ff8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoljtilu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.403Z","timestamp":1784473457403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoljtilu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:09:59 GMT\r\netag: W/\"1b-65610012c046e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobnchzi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.898Z","timestamp":1784473457898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobnchzi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:30 GMT\r\netag: W/\"1b-6567b86160557\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7141,"timings":{"blocked":6672,"dns":0,"connect":0,"send":0,"wait":469,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovhfwyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.132Z","timestamp":1784473457132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovhfwyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:04 GMT\r\netag: W/\"1b-655be32c379ad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxixmgu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.308Z","timestamp":1784473457308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxixmgu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 08:52:58 GMT\r\netag: W/\"1b-655ed66a81a39\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojscqpcb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.378Z","timestamp":1784473457378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojscqpcb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 22:36:27 GMT\r\netag: W/\"1b-6560d058432fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeirlfd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.944Z","timestamp":1784473457944,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeirlfd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico66x5z2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.614Z","timestamp":1784473457614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico66x5z2/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 01:35:12 GMT\r\netag: W/\"1b-6564bde4c5a56\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4719,"timings":{"blocked":61,"dns":0,"connect":0,"send":4074,"wait":584,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxexwmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.305Z","timestamp":1784473458305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxexwmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:54 GMT\r\netag: W/\"1b-65683a1c3bf10\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6517,"timings":{"blocked":6313,"dns":0,"connect":0,"send":0,"wait":204,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowkbldp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.357Z","timestamp":1784473458357,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowkbldp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozydlow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.379Z","timestamp":1784473458379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozydlow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:36 GMT\r\netag: W/\"1b-65683a43bb441\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4254,"timings":{"blocked":3792,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobgyior/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.847Z","timestamp":1784473455847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobgyior/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:17:30 GMT\r\netag: W/\"1b-6553f666f26b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotpceap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.694Z","timestamp":1784473456694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotpceap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:00 GMT\r\netag: W/\"1b-655a6c18a4f61\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomnpsqf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.138Z","timestamp":1784473457138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomnpsqf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:06 GMT\r\netag: W/\"1b-655be32ee0447\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/hphghxfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.429Z","timestamp":1784473457429,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/hphghxfx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3856,"timings":{"blocked":3252,"dns":0,"connect":0,"send":0,"wait":604,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqkhhof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.554Z","timestamp":1784473457554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqkhhof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 13:08:02 GMT\r\netag: W/\"1b-6562d5064d99a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5386,"timings":{"blocked":4766,"dns":0,"connect":0,"send":0,"wait":620,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxrnwds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.296Z","timestamp":1784473458296,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxrnwds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgufri/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.819Z","timestamp":1784473458819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgufri/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:02:50 GMT\r\netag: W/\"1b-656b430a0b158\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4726,"timings":{"blocked":4191,"dns":0,"connect":0,"send":0,"wait":535,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojvzlkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.903Z","timestamp":1784473458903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojvzlkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:57:54 GMT\r\netag: W/\"25-656bd5757abe8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":328,"mime_type":"text/css","magic":"ASCII text","md5":"dc12400f0715f018f429d680e084c239","sha1":"7e3b3ce7e35c4405630a343efb81cb695e272cb0","sha256":"f9877839bbac63572d51afaf9ceba8e5c4cc1f3528c7361086cc61471b812f63","sha512":"f6895b98189eeee848e95863bc5fbc43f74933914c14a68c81a1095c4e67ff6bb6c950a547879eec768812c9e7f2c42212c474894233391a7b69fede431e6c86","ssdeep":"","tlshash":"ad800400444f0014d7c10d47701f301511347444405d40305504054c4dc3d3043c0350","first_seen":"2026-07-19T15:05:15.497002Z","last_seen":"2026-07-19T15:05:15.497002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4589,"timings":{"blocked":4175,"dns":0,"connect":0,"send":0,"wait":414,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojjepcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.249Z","timestamp":1784473457249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojjepcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:47 GMT\r\netag: W/\"1b-655deb75e5b17\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozenkpi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.719Z","timestamp":1784473457719,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozenkpi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojlsgvq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.412Z","timestamp":1784473458412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojlsgvq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:54 GMT\r\netag: W/\"1b-65683a54a557a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2251,"timings":{"blocked":1916,"dns":0,"connect":0,"send":0,"wait":335,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2vi40m/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.696Z","timestamp":1784473458696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2vi40m/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 11:53:08 GMT\r\netag: W/\"1b-65690d9bb5dec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofqvxsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.995Z","timestamp":1784473458995,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofqvxsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxdwsjb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.956Z","timestamp":1784473456956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxdwsjb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:44 GMT\r\netag: W/\"1b-655be2e092698\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6789,"timings":{"blocked":6294,"dns":0,"connect":0,"send":0,"wait":495,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojdyogz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.330Z","timestamp":1784473457330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojdyogz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:50 GMT\r\netag: W/\"1b-655faa8180f5e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5691,"timings":{"blocked":5171,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomgbcht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.291Z","timestamp":1784473458291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomgbcht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:44 GMT\r\netag: W/\"1b-65683a12b76b4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6351,"timings":{"blocked":5758,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xpyczd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.636Z","timestamp":1784473458636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xpyczd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 21:04:50 GMT\r\netag: W/\"1b-6568470f01806\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3866,"timings":{"blocked":3368,"dns":0,"connect":0,"send":0,"wait":498,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xgnoja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.730Z","timestamp":1784473458730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xgnoja/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:27:44 GMT\r\netag: W/\"1b-6569d1192c864\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5590,"timings":{"blocked":5214,"dns":0,"connect":0,"send":0,"wait":376,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoihipvs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.641Z","timestamp":1784473457641,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoihipvs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2284,"timings":{"blocked":1554,"dns":0,"connect":0,"send":0,"wait":730,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojrkdtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.038Z","timestamp":1784473456038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojrkdtm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 21:36:31 GMT\r\netag: W/\"1b-6555722a2999e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozluyvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.050Z","timestamp":1784473457050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozluyvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:29 GMT\r\netag: W/\"1b-655be30b66415\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5761,"timings":{"blocked":5318,"dns":0,"connect":0,"send":0,"wait":443,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojuqgor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.101Z","timestamp":1784473457101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojuqgor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:47 GMT\r\netag: W/\"1b-655be31bf09f1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6915,"timings":{"blocked":6642,"dns":0,"connect":0,"send":0,"wait":273,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoogyyke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.191Z","timestamp":1784473457191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoogyyke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:32 GMT\r\netag: W/\"1b-655be34780f13\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoceihhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.805Z","timestamp":1784473458805,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoceihhf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoopcxqx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.815Z","timestamp":1784473458815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoopcxqx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 02:58:52 GMT\r\netag: W/\"1b-656b19ebeba4b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoprfuea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.819Z","timestamp":1784473455819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoprfuea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:46:52 GMT\r\netag: W/\"1b-6553ef8dfae2b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokzgdwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.282Z","timestamp":1784473456282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokzgdwu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 02:16:11 GMT\r\netag: W/\"1b-655976447f9d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolgwozq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.761Z","timestamp":1784473455761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolgwozq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:56:06 GMT\r\netag: W/\"1b-655350b08829c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":980,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotsyrtw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.263Z","timestamp":1784473457263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotsyrtw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:15 GMT\r\netag: W/\"1b-655e03ed4775f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomcrmdh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.335Z","timestamp":1784473457335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomcrmdh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:52 GMT\r\netag: W/\"1b-655faa83a0e77\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5792,"timings":{"blocked":5481,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_upehkm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.549Z","timestamp":1784473457549,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_upehkm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojyxlce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.737Z","timestamp":1784473457737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojyxlce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:46 GMT\r\netag: W/\"1b-65664f3c1c89b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":438,"dns":0,"connect":0,"send":0,"wait":484,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico8b5vzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.076Z","timestamp":1784473459076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico8b5vzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 10:25:49 GMT\r\netag: W/\"17-656e018d93152\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":315,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a19e3bc0254d603062b20c34e7fd8e53","sha1":"4cc1ec85e2a4388bbe51f3b04868e5441f192cce","sha256":"160b84fe002bf455a12286cb4d945ddace98cd56e26df360e382c4431b86cc82","sha512":"1861ddd632656c9c8e5368fe9e4096244d482bc1b6bcba2bc1b5c8bb389c1c1be6460e168a3617e094ce526c3acbd34249c32fdbda7dfd166cdf8e547fb2ec90","ssdeep":"","tlshash":"da7000a0c20820c203a0c0028308220e0000b028c2083800e00a002c08c02000080ea8","first_seen":"2026-07-09T06:45:58.550132Z","last_seen":"2026-07-21T15:25:14.060743Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2447,"timings":{"blocked":2039,"dns":0,"connect":0,"send":0,"wait":408,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoituuii/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.041Z","timestamp":1784473456041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoituuii/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:21:44 GMT\r\netag: W/\"1b-65557c44b790b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokjnbzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.230Z","timestamp":1784473456230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokjnbzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 07:41:15 GMT\r\netag: W/\"1b-65587d0f9b2ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohogwtu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.034Z","timestamp":1784473458034,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohogwtu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3701,"timings":{"blocked":3096,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoelhyik/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.716Z","timestamp":1784473455716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoelhyik/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:44:47 GMT\r\netag: W/\"1b-65533356733b9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokpjyoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.650Z","timestamp":1784473456650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokpjyoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:40 GMT\r\netag: W/\"1b-655a6c0622af3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoh9g2ufa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.296Z","timestamp":1784473457296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoh9g2ufa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 06:16:10 GMT\r\netag: W/\"1b-655eb35e87b57\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6065,"timings":{"blocked":4457,"dns":0,"connect":0,"send":1180,"wait":428,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqghahw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.080Z","timestamp":1784473458080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqghahw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:07 GMT\r\netag: W/\"1b-6567b8bde5dbd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconxfllp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.460Z","timestamp":1784473455460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconxfllp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 15:48:17 GMT\r\netag: W/\"1b-6552a098e1216\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobdauvl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.651Z","timestamp":1784473456651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobdauvl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:41 GMT\r\netag: W/\"1b-655a6c06b0492\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xxlbnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.711Z","timestamp":1784473457711,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xxlbnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoojxtrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.312Z","timestamp":1784473458312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoojxtrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:58 GMT\r\netag: W/\"1b-65683a1f6e4cf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6645,"timings":{"blocked":6334,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowenqbi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.343Z","timestamp":1784473458343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowenqbi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:15 GMT\r\netag: W/\"1b-65683a2fd96c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5651,"timings":{"blocked":3990,"dns":0,"connect":0,"send":1198,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovwynah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.415Z","timestamp":1784473458415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovwynah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:56 GMT\r\netag: W/\"1b-65683a56a2219\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5142,"timings":{"blocked":4445,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyecgmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.557Z","timestamp":1784473458557,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyecgmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotnudmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.717Z","timestamp":1784473458717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotnudmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 00:18:40 GMT\r\netag: W/\"1b-6569b43fc0ade\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6559,"timings":{"blocked":6105,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopezdvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.237Z","timestamp":1784473455237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopezdvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 08:19:11 GMT\r\netag: W/\"1b-654fb87c74ace\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohy49fb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.350Z","timestamp":1784473455350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohy49fb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 11:59:55 GMT\r\netag: W/\"1b-65512bb07372e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobmuzwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.122Z","timestamp":1784473456122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobmuzwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 12:11:43 GMT\r\netag: W/\"1b-655635c918ec5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohmdsqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.285Z","timestamp":1784473456285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohmdsqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:06 GMT\r\netag: W/\"1b-6559ade84b87b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6602,"timings":{"blocked":6139,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolybakn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.852Z","timestamp":1784473456852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolybakn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:59 GMT\r\netag: W/\"1b-655be2b5cb440\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7189,"timings":{"blocked":6842,"dns":0,"connect":0,"send":0,"wait":347,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogwogdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.653Z","timestamp":1784473457653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogwogdo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:58 GMT\r\netag: W/\"1b-6565a68618261\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7208,"timings":{"blocked":6689,"dns":0,"connect":0,"send":0,"wait":519,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocshema/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.180Z","timestamp":1784473457180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocshema/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:27 GMT\r\netag: W/\"1b-655be34226d3f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorbsokc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.443Z","timestamp":1784473457443,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorbsokc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:20:55 GMT\r\netag: W/\"1b-656188a0e23a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovmlpev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.646Z","timestamp":1784473457646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovmlpev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:50 GMT\r\netag: W/\"1b-6565a67eccf68\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodqunqr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.916Z","timestamp":1784473457916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodqunqr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:41 GMT\r\netag: W/\"1b-6567b86b4b64d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5614,"timings":{"blocked":5261,"dns":0,"connect":0,"send":0,"wait":353,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosfmttl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.640Z","timestamp":1784473458640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosfmttl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 21:37:17 GMT\r\netag: W/\"1b-65684e4faff0c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogcjb6i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.462Z","timestamp":1784473455462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogcjb6i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 16:45:15 GMT\r\netag: W/\"1b-6552ad54bd53c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohhcbmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.109Z","timestamp":1784473456109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohhcbmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 07:15:42 GMT\r\netag: W/\"1b-6555f39edfe90\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":981,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":981,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoplfima/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.364Z","timestamp":1784473456364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoplfima/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:58 GMT\r\netag: W/\"1b-655a6ba4ecf72\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozwvaoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.159Z","timestamp":1784473457159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozwvaoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:16 GMT\r\netag: W/\"1b-655be337f95d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconcbmmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.367Z","timestamp":1784473458367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconcbmmu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:30 GMT\r\netag: W/\"1b-65683a3e22a63\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4776,"timings":{"blocked":4466,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaokuuo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.508Z","timestamp":1784473458508,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaokuuo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2072,"timings":{"blocked":1752,"dns":0,"connect":0,"send":0,"wait":320,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icos1rh0ua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.721Z","timestamp":1784473458721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icos1rh0ua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 01:48:33 GMT\r\netag: W/\"1b-6569c856aaa9d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5401,"timings":{"blocked":3714,"dns":0,"connect":0,"send":1225,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconlmtqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.817Z","timestamp":1784473458817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconlmtqa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 04:49:12 GMT\r\netag: W/\"1b-656b3294fe9aa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5683,"timings":{"blocked":5370,"dns":0,"connect":0,"send":0,"wait":313,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoumepzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.231Z","timestamp":1784473455231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoumepzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 18:16:20 GMT\r\netag: W/\"1b-654efc17b9d5b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovtfrcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.415Z","timestamp":1784473456415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovtfrcp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:14 GMT\r\netag: W/\"1b-655a6bb395e44\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxzahtf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.563Z","timestamp":1784473457563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxzahtf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 16:50:36 GMT\r\netag: W/\"1b-656306c5b5ad4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7082,"timings":{"blocked":6628,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoykrbgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.589Z","timestamp":1784473458589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoykrbgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:10 GMT\r\netag: W/\"1b-65683a9d1065b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5590,"timings":{"blocked":5165,"dns":0,"connect":0,"send":0,"wait":425,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xxsryb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.710Z","timestamp":1784473458710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xxsryb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 18:49:21 GMT\r\netag: W/\"1b-65696aa3e5267\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotcezls/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.149Z","timestamp":1784473459149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotcezls/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 21:27:07 GMT\r\netag: W/\"1b-656e955d7b8cb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3166,"timings":{"blocked":2773,"dns":0,"connect":0,"send":0,"wait":393,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoobtpiu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.743Z","timestamp":1784473456743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoobtpiu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:26 GMT\r\netag: W/\"1b-655a6c31321c9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xjyzek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.413Z","timestamp":1784473457413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xjyzek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:22:33 GMT\r\netag: W/\"1b-6561104b3ba2e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6003,"timings":{"blocked":5526,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icossir1z/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.615Z","timestamp":1784473457615,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icossir1z/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomzetcu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.904Z","timestamp":1784473457904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomzetcu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:34 GMT\r\netag: W/\"1b-6567b86497934\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":395,"dns":0,"connect":0,"send":0,"wait":497,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorlthpr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.953Z","timestamp":1784473457953,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorlthpr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:05 GMT\r\netag: W/\"1b-6567b88200dd6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohhsohm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.131Z","timestamp":1784473458131,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohhsohm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovf6ev7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.719Z","timestamp":1784473458719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovf6ev7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 01:37:22 GMT\r\netag: W/\"1b-6569c5d72fa79\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3777,"timings":{"blocked":3270,"dns":0,"connect":0,"send":0,"wait":507,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobskl0i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.098Z","timestamp":1784473459098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobskl0i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:03:35 GMT\r\netag: W/\"1b-656e24d0ffc9d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6544,"timings":{"blocked":6017,"dns":0,"connect":0,"send":0,"wait":527,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotarokz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.569Z","timestamp":1784473455569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotarokz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:23:33 GMT\r\netag: W/\"1b-6552eb892abd7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooxsmys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.445Z","timestamp":1784473456445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooxsmys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:25 GMT\r\netag: W/\"1b-655a6bbe73239\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqxgvzf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.574Z","timestamp":1784473456574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqxgvzf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:13 GMT\r\netag: W/\"1b-655a6bec1f82c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5722,"timings":{"blocked":5025,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowzneil/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.551Z","timestamp":1784473458551,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowzneil/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2036,"timings":{"blocked":1644,"dns":0,"connect":0,"send":0,"wait":392,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icof5bryn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.601Z","timestamp":1784473457601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icof5bryn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 21:55:29 GMT\r\netag: W/\"1b-65648cc8d275b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4678,"timings":{"blocked":44,"dns":0,"connect":0,"send":4099,"wait":535,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohoikmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.674Z","timestamp":1784473457674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohoikmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:32 GMT\r\netag: W/\"1b-6565a91ba0b13\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5985,"timings":{"blocked":5560,"dns":0,"connect":0,"send":0,"wait":425,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico6gdeb7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.784Z","timestamp":1784473457784,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico6gdeb7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 03:15:06 GMT\r\netag: W/\"1b-656757f4029be\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogzftwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.948Z","timestamp":1784473458948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogzftwg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:53 GMT\r\netag: W/\"1b-656c9574acbc2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5615,"timings":{"blocked":5304,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomgvgsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.238Z","timestamp":1784473455238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomgvgsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 08:19:12 GMT\r\netag: W/\"1b-654fb87ce6eee\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozofi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.258Z","timestamp":1784473455258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozofi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 12:00:28 GMT\r\netag: W/\"6a3bc6dc-47f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1151,"size_decoded":592,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"d5cac4813ff728a45a6c6ab8f44ef22b","sha1":"0aa633944ece465608da36a17374cb1d2e46a598","sha256":"07b33b4f598c041eb435d897d865125cb54c6b1a4e6460e5b08784f3015cee73","sha512":"984d18d584b27fd27def1353d6fc6dca4aa4f7eca5c180b03891c79699177e44c4cb071a4467f3dda162b2571a62119813c9ea3109ea7645748ff2f0b17fc2e4","ssdeep":"","tlshash":"bd2135b2dca86191833098c833a72b146f58721145461ca6f62f680cfff7a18439b7bd","first_seen":"2026-07-19T15:05:15.498523Z","last_seen":"2026-07-19T15:05:15.498523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xbeacr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.214Z","timestamp":1784473458214,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xbeacr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3587,"timings":{"blocked":3228,"dns":0,"connect":0,"send":0,"wait":359,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xwrarp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.709Z","timestamp":1784473458709,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xwrarp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 18:49:21 GMT\r\netag: W/\"1b-65696aa371ea7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohrhtlx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.051Z","timestamp":1784473456051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohrhtlx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:22:27 GMT\r\netag: W/\"1b-65557c6e71337\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1026,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouyefra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.254Z","timestamp":1784473456254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouyefra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 16:59:00 GMT\r\netag: W/\"1b-6558f9ba429f1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqtgfhj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.491Z","timestamp":1784473457491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqtgfhj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 16:29:24 GMT\r\netag: W/\"1b-6561c02b3ea50\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6164,"timings":{"blocked":5789,"dns":0,"connect":0,"send":0,"wait":375,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconvimjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.584Z","timestamp":1784473457584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconvimjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 02:10:40 GMT\r\netag: W/\"1b-656383f4e2e8c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooljclg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.096Z","timestamp":1784473458096,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooljclg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobfomds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.500Z","timestamp":1784473458500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobfomds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:33 GMT\r\netag: W/\"1b-65683a79ec4eb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6255,"timings":{"blocked":5661,"dns":0,"connect":0,"send":0,"wait":594,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokulbbr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.957Z","timestamp":1784473458957,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokulbbr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xjfqej/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.627Z","timestamp":1784473458627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xjfqej/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 21:03:22 GMT\r\netag: W/\"1b-656846bb3369b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6190,"timings":{"blocked":5766,"dns":0,"connect":0,"send":0,"wait":424,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico7jo1wb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.533Z","timestamp":1784473455533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico7jo1wb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 20:27:30 GMT\r\netag: W/\"1b-6552df017acad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconxedul/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.732Z","timestamp":1784473456732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconxedul/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:20 GMT\r\netag: W/\"1b-655a6c2be4b0e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobmstty/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.126Z","timestamp":1784473457126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobmstty/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:01 GMT\r\netag: W/\"1b-655be329fd4b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_gqexzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.548Z","timestamp":1784473457548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_gqexzq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 11:27:58 GMT\r\netag: W/\"1e-6562bea847544\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":5467,"timings":{"blocked":4770,"dns":0,"connect":0,"send":0,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconnihfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.729Z","timestamp":1784473457729,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconnihfs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3763,"timings":{"blocked":3167,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xncjql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.732Z","timestamp":1784473458732,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xncjql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohwcelm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.093Z","timestamp":1784473456093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohwcelm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 00:27:43 GMT\r\netag: W/\"1b-6555986e18f7e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovjmshg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.126Z","timestamp":1784473458126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovjmshg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:34 GMT\r\netag: W/\"1b-6567b8d79cdc5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6889,"timings":{"blocked":6478,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopvylvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.463Z","timestamp":1784473457463,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopvylvg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":3279,"wait":595,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoraxheu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.824Z","timestamp":1784473457824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoraxheu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:12 GMT\r\netag: W/\"1b-65679977d5104\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaheoxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.335Z","timestamp":1784473458335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaheoxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:10 GMT\r\netag: W/\"1b-65683a2b5432b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5966,"timings":{"blocked":5655,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoieuiyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.373Z","timestamp":1784473456373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoieuiyi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:02 GMT\r\netag: W/\"1b-655a6ba808dcf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/kopmvwpf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.508Z","timestamp":1784473457508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/kopmvwpf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:11:02 GMT\r\netag: W/\"1b-6561ff1e4100b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5043,"timings":{"blocked":4786,"dns":0,"connect":0,"send":0,"wait":257,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xytmjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.211Z","timestamp":1784473458211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xytmjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 14:28:06 GMT\r\netag: W/\"1b-6567ee616a200\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5257,"timings":{"blocked":4561,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofomzkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.861Z","timestamp":1784473458861,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofomzkg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozoalsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.990Z","timestamp":1784473458990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozoalsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 20:41:33 GMT\r\netag: W/\"1b-656d4950c8b63\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5094,"timings":{"blocked":4808,"dns":0,"connect":0,"send":0,"wait":286,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconkudah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.680Z","timestamp":1784473455680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconkudah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:42:45 GMT\r\netag: W/\"1b-655332e17ae85\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoufrmzo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.463Z","timestamp":1784473456463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoufrmzo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:29 GMT\r\netag: W/\"1b-655a6bc215cd6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolbrqnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.542Z","timestamp":1784473456542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolbrqnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:03 GMT\r\netag: W/\"1b-655a6be2c0196\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopuyqov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.025Z","timestamp":1784473457025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopuyqov/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:20 GMT\r\netag: W/\"1b-655be302e86e9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7446,"timings":{"blocked":7076,"dns":0,"connect":0,"send":0,"wait":370,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqwcrhs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.163Z","timestamp":1784473457163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqwcrhs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:18 GMT\r\netag: W/\"1b-655be33a240cf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5601,"timings":{"blocked":4302,"dns":0,"connect":0,"send":603,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoosmvgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.380Z","timestamp":1784473457380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoosmvgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 23:29:59 GMT\r\netag: W/\"1b-6560dc4f5561f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4450,"timings":{"blocked":3925,"dns":0,"connect":0,"send":0,"wait":525,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohaojxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.591Z","timestamp":1784473457591,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohaojxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogbusca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.668Z","timestamp":1784473457668,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogbusca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3169,"timings":{"blocked":2616,"dns":0,"connect":0,"send":0,"wait":553,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyxutnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.839Z","timestamp":1784473456839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyxutnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:50 GMT\r\netag: W/\"1b-655be2ac6fc38\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogyfjbn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.049Z","timestamp":1784473457049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogyfjbn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:29 GMT\r\netag: W/\"1b-655be30ae0777\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4891,"timings":{"blocked":4301,"dns":0,"connect":0,"send":0,"wait":590,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozizply/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.875Z","timestamp":1784473457875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozizply/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:15 GMT\r\netag: W/\"1b-6567b85282ac6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4231,"timings":{"blocked":3744,"dns":0,"connect":0,"send":0,"wait":487,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodiacvy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.287Z","timestamp":1784473458287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodiacvy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:42 GMT\r\netag: W/\"1b-65683a1012a95\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6402,"timings":{"blocked":4092,"dns":0,"connect":0,"send":1930,"wait":380,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoztxbgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.804Z","timestamp":1784473458804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoztxbgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 15:40:57 GMT\r\netag: W/\"1b-656a8265364c4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5450,"timings":{"blocked":5025,"dns":0,"connect":0,"send":0,"wait":425,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoexhzev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.854Z","timestamp":1784473458854,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoexhzev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2617,"timings":{"blocked":2068,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokuxzpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.354Z","timestamp":1784473456354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokuxzpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:52 GMT\r\netag: W/\"1b-655a6b9ee0238\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxktpfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.710Z","timestamp":1784473456710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxktpfr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:08 GMT\r\netag: W/\"1b-655a6c2077e39\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4940,"timings":{"blocked":4360,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaxiajg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.105Z","timestamp":1784473457105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaxiajg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:48 GMT\r\netag: W/\"1b-655be31d8bc0d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6279,"timings":{"blocked":5900,"dns":0,"connect":0,"send":0,"wait":379,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xltldd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.736Z","timestamp":1784473458736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xltldd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:33:05 GMT\r\netag: W/\"1b-6569d24b02712\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2705,"timings":{"blocked":2254,"dns":0,"connect":0,"send":0,"wait":451,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyjfvuz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.553Z","timestamp":1784473455553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyjfvuz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:46 GMT\r\netag: W/\"1b-6552e95940851\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozgmcop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.514Z","timestamp":1784473456514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozgmcop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:51 GMT\r\netag: W/\"1b-655a6bd75ffe1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconbhbhn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.718Z","timestamp":1784473456718,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconbhbhn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:12 GMT\r\netag: W/\"1b-655a6c24a1515\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqhatve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.438Z","timestamp":1784473457438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqhatve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:17:37 GMT\r\netag: W/\"1b-656187e422ed7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohqrjit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.571Z","timestamp":1784473456571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohqrjit/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:12 GMT\r\netag: W/\"1b-655a6beb18d0d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotsobwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.399Z","timestamp":1784473457399,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotsobwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:05:23 GMT\r\netag: W/\"1b-6560ff0bbb48a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoimlppu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.241Z","timestamp":1784473458241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoimlppu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:15 GMT\r\netag: W/\"1b-656839f66665e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5121,"timings":{"blocked":4542,"dns":0,"connect":0,"send":0,"wait":579,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogqokui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.433Z","timestamp":1784473458433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogqokui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:06 GMT\r\netag: W/\"1b-65683a60306b5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6952,"timings":{"blocked":6549,"dns":0,"connect":0,"send":0,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomiilip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.704Z","timestamp":1784473456704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomiilip/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:05 GMT\r\netag: W/\"1b-655a6c1d5a09c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoztfu83/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.099Z","timestamp":1784473459099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoztfu83/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 13:03:35 GMT\r\netag: W/\"1b-656e24d12dafd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoztnrxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.144Z","timestamp":1784473456144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoztnrxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 21:47:07 GMT\r\netag: W/\"1b-6556b665ecdd9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooplung/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.719Z","timestamp":1784473456719,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooplung/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2643,"timings":{"blocked":2130,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorpfuuh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.566Z","timestamp":1784473457566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorpfuuh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 17:40:03 GMT\r\netag: W/\"1b-656311d3233bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocuqpzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.042Z","timestamp":1784473458042,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocuqpzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocbbbqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.158Z","timestamp":1784473458158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocbbbqi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:47 GMT\r\netag: W/\"1b-6567b8e3e65da\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7111,"timings":{"blocked":6559,"dns":0,"connect":0,"send":0,"wait":552,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojrxaky/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.857Z","timestamp":1784473458857,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojrxaky/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1925,"timings":{"blocked":1598,"dns":0,"connect":0,"send":0,"wait":327,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqnahcc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.991Z","timestamp":1784473455991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqnahcc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:26:06 GMT\r\netag: W/\"1b-6554cee7603aa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobqevhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.289Z","timestamp":1784473457289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobqevhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:35 GMT\r\netag: W/\"1b-655e9e010b1b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogdlbnj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.659Z","timestamp":1784473457659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogdlbnj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:56:00 GMT\r\netag: W/\"1b-6565a687f0cdf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":446,"dns":0,"connect":0,"send":0,"wait":484,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqlqwhr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.978Z","timestamp":1784473458978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqlqwhr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 13:10:04 GMT\r\netag: W/\"1b-656ce46642918\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5372,"timings":{"blocked":4956,"dns":0,"connect":0,"send":0,"wait":416,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokwdqdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.212Z","timestamp":1784473457212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokwdqdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 23:15:40 GMT\r\netag: W/\"1b-655d1383e918f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodgjwwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.733Z","timestamp":1784473457733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodgjwwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:45 GMT\r\netag: W/\"1b-65664f3ad563c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":434,"dns":0,"connect":0,"send":0,"wait":168,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowvcxgh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.370Z","timestamp":1784473458370,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowvcxgh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2898,"timings":{"blocked":2333,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoburkpb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.364Z","timestamp":1784473458364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoburkpb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:28 GMT\r\netag: W/\"1b-65683a3c34824\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5650,"timings":{"blocked":4045,"dns":0,"connect":0,"send":1201,"wait":404,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconjxomx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.658Z","timestamp":1784473456658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconjxomx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:43 GMT\r\netag: W/\"1b-655a6c08cf410\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6345,"timings":{"blocked":5874,"dns":0,"connect":0,"send":0,"wait":471,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqolqkm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.685Z","timestamp":1784473456685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqolqkm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:55 GMT\r\netag: W/\"1b-655a6c146ed65\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobkqsbg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.115Z","timestamp":1784473459115,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobkqsbg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoigeprs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.088Z","timestamp":1784473456088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoigeprs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:36:07 GMT\r\netag: W/\"1b-65558ce5b80ba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":961,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowfhjju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.170Z","timestamp":1784473457170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowfhjju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:21 GMT\r\netag: W/\"1b-655be33ccac2a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogiojyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.908Z","timestamp":1784473457908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogiojyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:36 GMT\r\netag: W/\"1b-6567b866fecf1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6046,"timings":{"blocked":5614,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokwfktq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.881Z","timestamp":1784473458881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokwfktq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:12:03 GMT\r\netag: W/\"1b-656bcb3662f79\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6459,"timings":{"blocked":6044,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoovmzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.457Z","timestamp":1784473457457,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoovmzjy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icochkrtk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.700Z","timestamp":1784473458700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icochkrtk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 13:10:07 GMT\r\netag: W/\"1b-65691ed1223ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4223,"timings":{"blocked":3621,"dns":0,"connect":0,"send":0,"wait":602,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/css/sppagebuilder.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.164Z","timestamp":1784473455164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/css/sppagebuilder.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: W/\"68195cae-30fa8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200616,"size_decoded":28508,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f27a05b58a591ba482f306c3410fff07","sha1":"08315367e99f912cb28fb7b681fc9fb953157dce","sha256":"b1895b449f34b546ef82ee783d1ba8003810633b7fdc2061fd813f691ff4125a","sha512":"f01c740dc237fb9ce97ff826c121b113a4c6d639580ebf264859cc82b1b4d00cdbad69876086249af57785d9f81afc6b4b15aed4402ce35e980661e8f3a6c142","ssdeep":"3072:91v5olQpWeegm8wTJLVAmyUYOWkI9m+FMQsQaJ2m:91v5olQrhmyMQsQaJ2m","tlshash":"aa14c732a451115db03b9b34a5cdb6cc2228d553e6120bfefd937a058b8a79b927370f","first_seen":"2025-05-10T18:39:47.709026Z","last_seen":"2026-07-19T15:05:15.500021Z","times_seen":143,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogmsgot/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.005Z","timestamp":1784473456005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogmsgot/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 11:06:13 GMT\r\netag: W/\"1b-6554e547e4398\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopuavpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.435Z","timestamp":1784473456435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopuavpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:22 GMT\r\netag: W/\"1b-655a6bbb5643c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolsfkbh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.276Z","timestamp":1784473458276,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolsfkbh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowwflfm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.872Z","timestamp":1784473458872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowwflfm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:10:42 GMT\r\netag: W/\"25-656bcae8df3b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":37,"size_decoded":325,"mime_type":"text/css","magic":"ASCII text","md5":"c433d1c0ade37c23cf11dc88b76570a4","sha1":"f87cca62b95a597585a3a830b3ab4060094798d0","sha256":"f9d1b47f227b58a10e04079f4d6e0da3d6a98c783d2b2cbb599454482d77aca3","sha512":"1cc2e959ca9c09ed67b87f9fcceaf42dd20d7ccdb4a353d80b35a0d50e3934abc4c556f74033fc02a6b0168e1ea20c0f95eaec5d114c877e9a8b0e70c9b48648","ssdeep":"","tlshash":"a7800404044d4504d1430d43704f30111114740cc45d40307004454c4dc3d3403c5351","first_seen":"2026-07-19T15:05:15.501784Z","last_seen":"2026-07-19T15:19:18.246413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5357,"timings":{"blocked":4895,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopbwstm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.018Z","timestamp":1784473459018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopbwstm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:36 GMT\r\netag: W/\"1b-656d670dfd5bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyfdtkl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.023Z","timestamp":1784473459023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyfdtkl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:41 GMT\r\netag: W/\"1b-656d6712838f5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4706,"timings":{"blocked":4235,"dns":0,"connect":0,"send":0,"wait":471,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowporjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.073Z","timestamp":1784473456073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowporjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:34:16 GMT\r\netag: W/\"1b-65558c7beffa6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovdljuj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.513Z","timestamp":1784473456513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovdljuj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:51 GMT\r\netag: W/\"1b-655a6bd6da341\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconeuyqm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.280Z","timestamp":1784473457280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconeuyqm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 01:19:27 GMT\r\netag: W/\"1b-655e710c880c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqqwzez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.526Z","timestamp":1784473458526,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqqwzez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2026,"timings":{"blocked":1552,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohaioau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.095Z","timestamp":1784473459095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohaioau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 12:52:36 GMT\r\netag: W/\"1b-656e225ca3603\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqfy061/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.168Z","timestamp":1784473459168,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqfy061/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofdyjzs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.250Z","timestamp":1784473455250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofdyjzs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:48:19 GMT\r\netag: W/\"1b-654fe73a9b0c4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icombnnev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.432Z","timestamp":1784473456432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icombnnev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:21 GMT\r\netag: W/\"1b-655a6bba49b5d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotmytcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.420Z","timestamp":1784473457420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotmytcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:28:49 GMT\r\netag: W/\"1b-656111b1f5978\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7147,"timings":{"blocked":6703,"dns":0,"connect":0,"send":0,"wait":444,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogjzelj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.499Z","timestamp":1784473456499,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogjzelj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobzntck/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.533Z","timestamp":1784473456533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobzntck/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:00 GMT\r\netag: W/\"1b-655a6bdff82f8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosnabbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.618Z","timestamp":1784473456618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosnabbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:29 GMT\r\netag: W/\"1b-655a6bfbc369d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouzucdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.724Z","timestamp":1784473457724,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouzucdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:42 GMT\r\netag: W/\"1b-65664f3828d1d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogmtueu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.815Z","timestamp":1784473457815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogmtueu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:12 GMT\r\netag: W/\"1b-6567997776564\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7175,"timings":{"blocked":6659,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodxahkj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.824Z","timestamp":1784473458824,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodxahkj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"da3a31f1e9f479606469aff416ab917f","sha1":"4b18dcab9c47547b1d8daa4aa5771c0949303ec7","sha256":"c125bc6783e4f1add7fd69b16ea124ef6bb145b4281d89df17325898ba8fd761","sha512":"407a435483e85b6bc7f80b2cf132d642e62d65837ceb305bcd4e43e5915b30d2990ae66cc3b4b0b059ed3ae6cf1007653b035792e16164f33ff402956677243b","ssdeep":"","tlshash":"b48000a08a2a00c083a0c003a3002a280802b02880200822e02e000c0cc22000a80aae","first_seen":"2026-07-05T03:53:26.747277Z","last_seen":"2026-07-21T15:25:14.068585Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3227,"timings":{"blocked":2623,"dns":0,"connect":0,"send":0,"wait":604,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyfwfvc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.201Z","timestamp":1784473455201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyfwfvc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 09:03:52 GMT\r\netag: W/\"1b-654e809b8eb3f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotkypld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.948Z","timestamp":1784473455948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotkypld/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:43 GMT\r\netag: W/\"1b-6554c6fe8a3d1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorxqhqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.106Z","timestamp":1784473456106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorxqhqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 03:27:09 GMT\r\netag: W/\"1b-6555c088e264b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovcqyek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.169Z","timestamp":1784473456169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovcqyek/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 00:54:58 GMT\r\netag: W/\"1b-6556e0625227f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotasmgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.636Z","timestamp":1784473456636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotasmgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:34 GMT\r\netag: W/\"1b-655a6c0063019\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7520,"timings":{"blocked":7150,"dns":0,"connect":0,"send":0,"wait":370,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobdzhcr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.918Z","timestamp":1784473456918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobdzhcr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:26 GMT\r\netag: W/\"1b-655be2cf303a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosotzeh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.953Z","timestamp":1784473456953,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosotzeh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2472,"timings":{"blocked":1957,"dns":0,"connect":0,"send":0,"wait":515,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovquhzr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.450Z","timestamp":1784473457450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovquhzr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:25:36 GMT\r\netag: W/\"1b-656189accc1d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgypuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.777Z","timestamp":1784473455777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgypuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 06:56:45 GMT\r\netag: W/\"1b-65536ba79db61\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/uwmspowx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.776Z","timestamp":1784473457776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/uwmspowx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 00:03:36 GMT\r\netag: W/\"1b-65672d26d4cdf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5018,"timings":{"blocked":4708,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojapznz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.810Z","timestamp":1784473457810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojapznz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:13 GMT\r\netag: W/\"1b-656795720a245\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7218,"timings":{"blocked":6696,"dns":0,"connect":0,"send":0,"wait":522,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoikvljz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.976Z","timestamp":1784473457976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoikvljz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:11 GMT\r\netag: W/\"1b-6567b88853070\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5855,"timings":{"blocked":4225,"dns":0,"connect":0,"send":1168,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotrmsmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.022Z","timestamp":1784473458022,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotrmsmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:35 GMT\r\netag: W/\"1b-6567b89f1ef5a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotfiaol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.580Z","timestamp":1784473458580,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotfiaol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3378,"timings":{"blocked":2773,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xsiuju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.130Z","timestamp":1784473459130,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xsiuju/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:16:46 GMT\r\netag: W/\"1b-656e4ffef5584\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiaspvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.500Z","timestamp":1784473456500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiaspvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:45 GMT\r\netag: W/\"1b-655a6bd1a7266\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5658,"timings":{"blocked":5038,"dns":0,"connect":0,"send":0,"wait":620,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2jrbyha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.765Z","timestamp":1784473456765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2jrbyha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 08:34:28 GMT\r\netag: W/\"1b-655b0cb01e311\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoholupg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.404Z","timestamp":1784473457404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoholupg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:09:59 GMT\r\netag: W/\"1b-656100131d0ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohcbxpn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.497Z","timestamp":1784473458497,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohcbxpn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodrkoib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.736Z","timestamp":1784473457736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodrkoib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:46 GMT\r\netag: W/\"1b-65664f3c10d1b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozosffc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.878Z","timestamp":1784473457878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozosffc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:17 GMT\r\netag: W/\"1b-6567b85471ca4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5616,"timings":{"blocked":5259,"dns":0,"connect":0,"send":0,"wait":357,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojmhmcm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.192Z","timestamp":1784473455192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojmhmcm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 21:43:35 GMT\r\netag: W/\"1b-654de88da9016\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icousmbpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.276Z","timestamp":1784473455276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icousmbpe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 18:37:29 GMT\r\netag: W/\"1b-655042b012360\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolzeppv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.864Z","timestamp":1784473457864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolzeppv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:10 GMT\r\netag: W/\"1b-6567b84e5b32a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6841,"timings":{"blocked":6541,"dns":0,"connect":0,"send":0,"wait":300,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobryass/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.431Z","timestamp":1784473458431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobryass/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:04 GMT\r\netag: W/\"1b-65683a5ef1156\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5136,"timings":{"blocked":4573,"dns":0,"connect":0,"send":0,"wait":563,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouxhezx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.329Z","timestamp":1784473458329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouxhezx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:06 GMT\r\netag: W/\"1b-65683a27af94c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5168,"timings":{"blocked":4472,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosrcoqq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.385Z","timestamp":1784473456385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosrcoqq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:05 GMT\r\netag: W/\"1b-655a6baba6a4c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7215,"timings":{"blocked":6990,"dns":0,"connect":0,"send":0,"wait":225,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoevfaoq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.567Z","timestamp":1784473456567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoevfaoq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:11 GMT\r\netag: W/\"1b-655a6bea920ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5349nd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.767Z","timestamp":1784473456767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5349nd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 09:00:01 GMT\r\netag: W/\"1b-655b126569ab5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojwwvgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.067Z","timestamp":1784473457067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojwwvgz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:35 GMT\r\netag: W/\"1b-655be3113e588\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7432,"timings":{"blocked":6877,"dns":0,"connect":0,"send":0,"wait":555,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocwmypv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.523Z","timestamp":1784473457523,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocwmypv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3821,"timings":{"blocked":3216,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohdwrfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.989Z","timestamp":1784473457989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohdwrfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:19 GMT\r\netag: W/\"1b-6567b88fc73a9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6537,"timings":{"blocked":6043,"dns":0,"connect":0,"send":0,"wait":494,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xsiwhl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.748Z","timestamp":1784473458748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xsiwhl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:02:15 GMT\r\netag: W/\"1b-656a0e748a303\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4196,"timings":{"blocked":3579,"dns":0,"connect":0,"send":0,"wait":617,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogfpjxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.405Z","timestamp":1784473455405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogfpjxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 04:40:01 GMT\r\netag: W/\"1b-65520b3a556d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icom1hvdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.136Z","timestamp":1784473456136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icom1hvdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 15:28:53 GMT\r\netag: W/\"1b-655661db91a6b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoougoar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.163Z","timestamp":1784473456163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoougoar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:43 GMT\r\netag: W/\"1b-6556c62d88eba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovupjop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.343Z","timestamp":1784473456343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovupjop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:54:27 GMT\r\netag: W/\"1b-655a62cf06eb2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoratyys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.429Z","timestamp":1784473456429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoratyys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:19 GMT\r\netag: W/\"1b-655a6bb8be33f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoskvwxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.614Z","timestamp":1784473456614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoskvwxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:28 GMT\r\netag: W/\"1b-655a6bfa35f3f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icophomps/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.065Z","timestamp":1784473457065,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icophomps/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomwhdxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.172Z","timestamp":1784473457172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomwhdxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:22 GMT\r\netag: W/\"1b-655be33ddf208\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoclfknx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.531Z","timestamp":1784473456531,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoclfknx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4070,"timings":{"blocked":3466,"dns":0,"connect":0,"send":0,"wait":604,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotwlcws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.133Z","timestamp":1784473457133,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotwlcws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3976,"timings":{"blocked":3479,"dns":0,"connect":0,"send":0,"wait":497,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojscqpca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.377Z","timestamp":1784473457377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojscqpca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 22:36:24 GMT\r\netag: W/\"1b-6560d055fc2e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotuxvcs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.649Z","timestamp":1784473457649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotuxvcs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:56 GMT\r\netag: W/\"1b-6565a6842bf63\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6134,"timings":{"blocked":5839,"dns":0,"connect":0,"send":0,"wait":295,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoevncec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.682Z","timestamp":1784473457682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoevncec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:33 GMT\r\netag: W/\"1b-6565a91d543d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5498,"timings":{"blocked":4233,"dns":0,"connect":0,"send":944,"wait":321,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomuahdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.929Z","timestamp":1784473457929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomuahdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:49 GMT\r\netag: W/\"1b-6567b872ce3e5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozpvkjd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.552Z","timestamp":1784473458552,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozpvkjd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2790,"timings":{"blocked":2225,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobtwfiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.577Z","timestamp":1784473456577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobtwfiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:14 GMT\r\netag: W/\"1b-655a6bed38c2b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolopkdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.293Z","timestamp":1784473457293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolopkdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:56:12 GMT\r\netag: W/\"1b-655ea17f3b1e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xfihym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.623Z","timestamp":1784473457623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xfihym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 04:09:16 GMT\r\netag: W/\"1b-6564e05477527\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3231,"timings":{"blocked":2752,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowgulod/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.844Z","timestamp":1784473457844,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowgulod/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:03 GMT\r\netag: W/\"1b-6567b84785331\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoygsosx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.906Z","timestamp":1784473457906,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoygsosx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosubwrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.428Z","timestamp":1784473458428,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosubwrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3508,"timings":{"blocked":3118,"dns":0,"connect":0,"send":0,"wait":390,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopmyhuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.032Z","timestamp":1784473456032,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopmyhuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozwqxwr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.349Z","timestamp":1784473456349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozwqxwr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:50 GMT\r\netag: W/\"1b-655a6b9cfeb1a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoljkrtv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.072Z","timestamp":1784473457072,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoljkrtv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3353,"timings":{"blocked":2800,"dns":0,"connect":0,"send":0,"wait":553,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxvmbnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.706Z","timestamp":1784473455706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxvmbnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:44:10 GMT\r\netag: W/\"1b-6553333296927\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojdxoxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.072Z","timestamp":1784473456072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojdxoxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:34:08 GMT\r\netag: W/\"1b-65558c73d3cea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolxg5iy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.775Z","timestamp":1784473456775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolxg5iy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 16:44:42 GMT\r\netag: W/\"1b-655b7a42e7e91\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5in86i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.432Z","timestamp":1784473457432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5in86i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 10:40:45 GMT\r\netag: W/\"1b-6561723d02098\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogvxoec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.625Z","timestamp":1784473457625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogvxoec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 06:15:28 GMT\r\netag: W/\"1b-6564fc89e5c72\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouyciyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.466Z","timestamp":1784473456466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouyciyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:30 GMT\r\netag: W/\"1b-655a6bc31d795\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozuoujr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.644Z","timestamp":1784473456644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozuoujr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:38 GMT\r\netag: W/\"1b-655a6c0410695\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokfzhhc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.003Z","timestamp":1784473457003,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokfzhhc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:09 GMT\r\netag: W/\"1b-655be2f7b05e2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoc7rdvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.533Z","timestamp":1784473457533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoc7rdvk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 04:13:01 GMT\r\netag: W/\"1b-65625d70c4595\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6184,"timings":{"blocked":5860,"dns":0,"connect":0,"send":0,"wait":324,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoriytjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.837Z","timestamp":1784473457837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoriytjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:25:55 GMT\r\netag: W/\"1b-6567b83fb62d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5250,"timings":{"blocked":4687,"dns":0,"connect":0,"send":0,"wait":563,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodupxir/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.044Z","timestamp":1784473458044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodupxir/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:46 GMT\r\netag: W/\"1b-6567b8a917b11\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5239,"timings":{"blocked":4781,"dns":0,"connect":0,"send":0,"wait":458,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgrbvh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.179Z","timestamp":1784473458179,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgrbvh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xpblrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.209Z","timestamp":1784473458209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xpblrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 14:28:05 GMT\r\netag: W/\"1b-6567ee60982a1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4535,"timings":{"blocked":3955,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoedsbob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.007Z","timestamp":1784473457007,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoedsbob/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3956,"timings":{"blocked":3351,"dns":0,"connect":0,"send":0,"wait":605,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_nwiomw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.620Z","timestamp":1784473457620,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_nwiomw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 03:15:51 GMT\r\netag: W/\"1e-6564d4641a3e6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconzniax/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.233Z","timestamp":1784473458233,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconzniax/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoodffhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.299Z","timestamp":1784473458299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoodffhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:50 GMT\r\netag: W/\"1b-65683a185fa92\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2276,"timings":{"blocked":1951,"dns":0,"connect":0,"send":0,"wait":325,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeuosmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.968Z","timestamp":1784473458968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeuosmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 09:50:00 GMT\r\netag: W/\"1b-656cb7ae555ed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"da3a31f1e9f479606469aff416ab917f","sha1":"4b18dcab9c47547b1d8daa4aa5771c0949303ec7","sha256":"c125bc6783e4f1add7fd69b16ea124ef6bb145b4281d89df17325898ba8fd761","sha512":"407a435483e85b6bc7f80b2cf132d642e62d65837ceb305bcd4e43e5915b30d2990ae66cc3b4b0b059ed3ae6cf1007653b035792e16164f33ff402956677243b","ssdeep":"","tlshash":"b48000a08a2a00c083a0c003a3002a280802b02880200822e02e000c0cc22000a80aae","first_seen":"2026-07-05T03:53:26.747277Z","last_seen":"2026-07-21T15:25:14.068585Z","times_seen":28,"resource_available":false,"data":null}},"time_used":5214,"timings":{"blocked":4824,"dns":0,"connect":0,"send":0,"wait":390,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxoinye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.154Z","timestamp":1784473459154,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxoinye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokbtqvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.231Z","timestamp":1784473459231,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokbtqvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoetsqwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.594Z","timestamp":1784473455594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoetsqwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:30 GMT\r\netag: W/\"1b-6552f55baab5e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowocrua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.020Z","timestamp":1784473456020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowocrua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 14:36:19 GMT\r\netag: W/\"1b-6555143d6b621\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouipcybwht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.181Z","timestamp":1784473456181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouipcybwht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 09:01:55 GMT\r\netag: W/\"1b-65574d3a6d83d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodvexca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.427Z","timestamp":1784473457427,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodvexca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2557,"timings":{"blocked":2217,"dns":0,"connect":0,"send":0,"wait":340,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosuzdjs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.983Z","timestamp":1784473458983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosuzdjs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 14:33:06 GMT\r\netag: W/\"1b-656cf6f52229a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4086,"timings":{"blocked":3502,"dns":0,"connect":0,"send":0,"wait":584,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xlbxbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.172Z","timestamp":1784473459172,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xlbxbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2443,"timings":{"blocked":1878,"dns":0,"connect":0,"send":0,"wait":565,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouyjmke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.175Z","timestamp":1784473459175,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouyjmke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohvqnrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.287Z","timestamp":1784473455287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohvqnrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 21:26:28 GMT\r\netag: W/\"1b-65506874fef57\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogolalt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.441Z","timestamp":1784473457441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogolalt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:19:43 GMT\r\netag: W/\"1b-6561885c621b8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosegpqb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.540Z","timestamp":1784473457540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosegpqb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 07:37:40 GMT\r\netag: W/\"1b-65628b2e446e0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":495,"dns":0,"connect":0,"send":0,"wait":480,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoizwiyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.986Z","timestamp":1784473457986,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoizwiyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:17 GMT\r\netag: W/\"1b-6567b88dcb6ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoykchfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.660Z","timestamp":1784473458660,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoykchfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1956,"timings":{"blocked":1564,"dns":0,"connect":0,"send":0,"wait":392,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomoxgni/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.673Z","timestamp":1784473458673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomoxgni/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 07:53:42 GMT\r\netag: W/\"1b-6568d816f12e3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5629,"timings":{"blocked":5199,"dns":0,"connect":0,"send":0,"wait":430,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoghcoaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.000Z","timestamp":1784473459000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoghcoaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:35 GMT\r\netag: W/\"1b-656d5125417bc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3248,"timings":{"blocked":2857,"dns":0,"connect":0,"send":0,"wait":391,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxluetp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.090Z","timestamp":1784473456090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxluetp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 00:27:42 GMT\r\netag: W/\"1b-6555986d0c69f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodlsmjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.222Z","timestamp":1784473456222,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodlsmjz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomoacqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.708Z","timestamp":1784473457708,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomoacqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2271,"timings":{"blocked":1649,"dns":0,"connect":0,"send":0,"wait":622,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogodsrf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.787Z","timestamp":1784473457787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogodsrf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:02:31 GMT\r\netag: W/\"1b-65677d5f80c2a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7240,"timings":{"blocked":6761,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icollaqgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.548Z","timestamp":1784473458548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icollaqgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:51 GMT\r\netag: W/\"1b-65683a8bc4aa3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodiqwhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.689Z","timestamp":1784473458689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodiqwhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 11:19:08 GMT\r\netag: W/\"1b-6569060220ed3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosihbkq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.084Z","timestamp":1784473456084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosihbkq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:35:36 GMT\r\netag: W/\"1b-65558cc7f2f46\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotljowb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.469Z","timestamp":1784473458469,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotljowb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocfzhuf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.783Z","timestamp":1784473458783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocfzhuf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:31:58 GMT\r\netag: W/\"1b-656a1518fa6f4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6419,"timings":{"blocked":6053,"dns":0,"connect":0,"send":0,"wait":366,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofdjwau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.550Z","timestamp":1784473455550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofdjwau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:45 GMT\r\netag: W/\"1b-6552e9580034c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoehhffa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.633Z","timestamp":1784473455633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoehhffa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:20:44 GMT\r\netag: W/\"1b-65532df5b9d76\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqnregf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.493Z","timestamp":1784473456493,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqnregf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobngkgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.840Z","timestamp":1784473456840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobngkgr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:52 GMT\r\netag: W/\"1b-655be2ae68a53\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocbeucn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.863Z","timestamp":1784473458863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocbeucn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 12:02:29 GMT\r\netag: W/\"1b-656b936dcb509\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6402,"timings":{"blocked":6063,"dns":0,"connect":0,"send":0,"wait":339,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorypikz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.376Z","timestamp":1784473455376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorypikz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 21:06:02 GMT\r\netag: W/\"1b-6551a5c16bed3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopzntks/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.993Z","timestamp":1784473457993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopzntks/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:22 GMT\r\netag: W/\"1b-6567b892400a6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5936,"timings":{"blocked":5480,"dns":0,"connect":0,"send":0,"wait":456,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogcdxfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.298Z","timestamp":1784473458298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogcdxfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:50 GMT\r\netag: W/\"1b-65683a17b2cf2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5856,"timings":{"blocked":5480,"dns":0,"connect":0,"send":0,"wait":376,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofgizzm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.994Z","timestamp":1784473458994,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofgizzm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxzxwuf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.854Z","timestamp":1784473455854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxzxwuf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:17:52 GMT\r\netag: W/\"1b-6553f67bf35e9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofvrwwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.606Z","timestamp":1784473456606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofvrwwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:26 GMT\r\netag: W/\"1b-655a6bf81fc61\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5835,"timings":{"blocked":5316,"dns":0,"connect":0,"send":0,"wait":519,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolysnyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.642Z","timestamp":1784473456642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolysnyj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:37 GMT\r\netag: W/\"1b-655a6c027f0b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7269,"timings":{"blocked":6855,"dns":0,"connect":0,"send":0,"wait":414,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofnwvsj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.111Z","timestamp":1784473457111,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofnwvsj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2568,"timings":{"blocked":1961,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoalfufi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.512Z","timestamp":1784473457512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoalfufi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 22:58:19 GMT\r\netag: W/\"1b-65621718eb494\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3930,"timings":{"blocked":3537,"dns":0,"connect":0,"send":0,"wait":393,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomsiywx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.363Z","timestamp":1784473456363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomsiywx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:58 GMT\r\netag: W/\"1b-655a6ba469213\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouaezmk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.601Z","timestamp":1784473456601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouaezmk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:24 GMT\r\netag: W/\"1b-655a6bf6106e3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoa8zb3i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.709Z","timestamp":1784473457709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoa8zb3i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 00:51:15 GMT\r\netag: W/\"1b-6565f5ef19c84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5636,"timings":{"blocked":5316,"dns":0,"connect":0,"send":0,"wait":320,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojeireu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.751Z","timestamp":1784473457751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojeireu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:50:56 GMT\r\netag: W/\"1b-6566d9da9d963\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6682,"timings":{"blocked":6217,"dns":0,"connect":0,"send":0,"wait":465,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxswaxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.293Z","timestamp":1784473458293,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxswaxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:46 GMT\r\netag: W/\"1b-65683a14140d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xyyyxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.412Z","timestamp":1784473457412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xyyyxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:22:33 GMT\r\netag: W/\"1b-6561104ad612e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3235,"timings":{"blocked":2685,"dns":0,"connect":0,"send":0,"wait":550,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoczwqbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.227Z","timestamp":1784473458227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoczwqbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 18:40:49 GMT\r\netag: W/\"1b-656826ddd28ed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6042,"timings":{"blocked":5729,"dns":0,"connect":0,"send":0,"wait":313,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozzeakc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.238Z","timestamp":1784473458238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozzeakc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:11 GMT\r\netag: W/\"1b-656839f340bbf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/mrirg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.848Z","timestamp":1784473458848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /mrirg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 08:21:46 GMT\r\netag: W/\"1b-656b621813c41\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5102,"timings":{"blocked":4778,"dns":0,"connect":0,"send":0,"wait":324,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoe99iux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.042Z","timestamp":1784473459042,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoe99iux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 23:03:02 GMT\r\netag: W/\"24-656d68efaf9f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiwxvnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.573Z","timestamp":1784473456573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiwxvnv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:13 GMT\r\netag: W/\"1b-655a6beb9bacd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorekpbf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.704Z","timestamp":1784473456704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorekpbf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:05 GMT\r\netag: W/\"1b-655a6c1ddddfc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotokrui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.333Z","timestamp":1784473457333,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotokrui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:52 GMT\r\netag: W/\"1b-655faa8350d38\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoauephx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.754Z","timestamp":1784473457754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoauephx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:50:58 GMT\r\netag: W/\"1b-6566d9dc4a4c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6697,"timings":{"blocked":6251,"dns":0,"connect":0,"send":0,"wait":446,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobonzac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.912Z","timestamp":1784473457912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobonzac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:39 GMT\r\netag: W/\"1b-6567b8696510f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4656,"timings":{"blocked":4012,"dns":0,"connect":0,"send":0,"wait":644,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotiuzuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.082Z","timestamp":1784473458082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotiuzuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:09 GMT\r\netag: W/\"1b-6567b8bf1e5bc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6972,"timings":{"blocked":6530,"dns":0,"connect":0,"send":0,"wait":442,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_lmtizb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.680Z","timestamp":1784473458680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_lmtizb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 10:07:25 GMT\r\netag: W/\"1e-6568f5fa55e86\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozqpkvq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.308Z","timestamp":1784473455308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozqpkvq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 02:31:50 GMT\r\netag: W/\"1b-6550acb5eaa7b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobcpxgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.732Z","timestamp":1784473457732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobcpxgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:44 GMT\r\netag: W/\"1b-65664f3aa1a1c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5423,"timings":{"blocked":4860,"dns":0,"connect":0,"send":0,"wait":563,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoassond/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.398Z","timestamp":1784473458398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoassond/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:46 GMT\r\netag: W/\"1b-65683a4db111d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovzeybv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.199Z","timestamp":1784473455199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovzeybv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 09:03:42 GMT\r\netag: W/\"1b-654e809210096\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icottqjtw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.522Z","timestamp":1784473456522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icottqjtw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:55 GMT\r\netag: W/\"1b-655a6bdb3957d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopebhmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.919Z","timestamp":1784473456919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopebhmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:27 GMT\r\netag: W/\"1b-655be2cfb7f81\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4903,"timings":{"blocked":4322,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotjfpws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.206Z","timestamp":1784473457206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotjfpws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 20:47:14 GMT\r\netag: W/\"1b-655cf2562aec6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaqukyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.845Z","timestamp":1784473457845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaqukyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:04 GMT\r\netag: W/\"1b-6567b84840b30\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4257,"timings":{"blocked":3755,"dns":0,"connect":0,"send":0,"wait":502,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocrvvup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.558Z","timestamp":1784473458558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocrvvup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:56 GMT\r\netag: W/\"1b-65683a9019101\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6875,"timings":{"blocked":6334,"dns":0,"connect":0,"send":0,"wait":541,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozykbxe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.145Z","timestamp":1784473459145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozykbxe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:52:41 GMT\r\netag: W/\"1b-656e58063371e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojgsaqe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.257Z","timestamp":1784473459257,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojgsaqe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1514,"timings":{"blocked":1103,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohsfhor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.549Z","timestamp":1784473455549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohsfhor/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:43 GMT\r\netag: W/\"1b-6552e955f6b84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouteymc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.392Z","timestamp":1784473457392,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouteymc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3872,"timings":{"blocked":3276,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/dwlnqkiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.575Z","timestamp":1784473457575,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/dwlnqkiy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/js/sppagebuilder.js?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.313Z","timestamp":1784473459313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/js/sppagebuilder.js?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: W/\"68195cae-14149\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82249,"size_decoded":20705,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35578)","md5":"601dbe573d6a5a3d3bdc025d62d6cfc9","sha1":"ac12a6343b378d4e96bafa1602ec23dc8d208101","sha256":"3829ab1ab210fac19298175b96a467a1d8f2fde21160fc34b341fc4f28c8ba3d","sha512":"20d20e0d799f692327fc74064b1bdd9dfc5e2e0e54c8a826aa3c2d04a297a954abb650a4f3717085aa3523bb37de11a834495c9667add8f8957d818fd1da1bbc","ssdeep":"1536:hBIfDaQ5EQNejHWv4UgxuyYOcWKhJ0N8lc+AEnDAUFmwaLBqUUA8UusyyoTtjZnt:h6WQuHPuyYOQhJ0NkcTEDAUvaLpUA8su","tlshash":"9683d768b21534751abb62f1106f4649b2326938e50280a878bad5f61f7ccc9737bf7c","first_seen":"2025-02-27T18:47:39.661469Z","last_seen":"2026-07-21T09:07:52.16663Z","times_seen":516,"resource_available":true,"data":null}},"time_used":4619,"timings":{"blocked":4076,"dns":0,"connect":0,"send":0,"wait":543,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozbhpxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.427Z","timestamp":1784473455427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozbhpxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 07:46:41 GMT\r\netag: W/\"1b-655234f35e8ac\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokditeo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.982Z","timestamp":1784473456982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokditeo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:59 GMT\r\netag: W/\"1b-655be2eea2fd7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4496,"timings":{"blocked":3993,"dns":0,"connect":0,"send":0,"wait":503,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopxvbyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.765Z","timestamp":1784473457765,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopxvbyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:54 GMT\r\netag: W/\"1b-6566da11517b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohjmoie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.962Z","timestamp":1784473457962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohjmoie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:07 GMT\r\netag: W/\"1b-6567b883e1554\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6040,"timings":{"blocked":5608,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoedqvou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.385Z","timestamp":1784473455385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoedqvou/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 22:31:32 GMT\r\netag: W/\"1b-6551b8ddab493\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgxusu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.284Z","timestamp":1784473456284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgxusu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 02:16:14 GMT\r\netag: W/\"1b-65597647e9a30\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoundvtk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.326Z","timestamp":1784473456326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoundvtk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 13:11:38 GMT\r\netag: W/\"1b-655a08c599d41\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocsylxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.405Z","timestamp":1784473456405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocsylxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:12 GMT\r\netag: W/\"1b-655a6bb201985\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxvzxuj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.598Z","timestamp":1784473456598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxvzxuj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:22 GMT\r\netag: W/\"1b-655a6bf483f24\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokphlcf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.729Z","timestamp":1784473456729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokphlcf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:18 GMT\r\netag: W/\"1b-655a6c2a544d0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaijlgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.824Z","timestamp":1784473456824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaijlgc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:52 GMT\r\netag: W/\"1b-655bb633887c7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoynkxfi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.879Z","timestamp":1784473456879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoynkxfi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:11 GMT\r\netag: W/\"1b-655be2c08f1e6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico1y55pw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.342Z","timestamp":1784473455342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico1y55pw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 09:25:02 GMT\r\netag: W/\"1b-655109120b768\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogodtve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.198Z","timestamp":1784473456198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogodtve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 15:02:43 GMT\r\netag: W/\"1b-65579ddfb5f7d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoczibst/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.910Z","timestamp":1784473456910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoczibst/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:22 GMT\r\netag: W/\"1b-655be2cb713eb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorjfoim/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.560Z","timestamp":1784473458560,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorjfoim/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconyfols/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.610Z","timestamp":1784473458610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconyfols/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:16 GMT\r\netag: W/\"1b-65683aa2d3019\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6563,"timings":{"blocked":6200,"dns":0,"connect":0,"send":0,"wait":363,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnelmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.924Z","timestamp":1784473458924,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnelmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3182,"timings":{"blocked":2578,"dns":0,"connect":0,"send":0,"wait":604,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobbuasr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.138Z","timestamp":1784473459138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobbuasr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 16:36:49 GMT\r\netag: W/\"1b-656e547a0b2ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3959,"timings":{"blocked":3437,"dns":0,"connect":0,"send":0,"wait":522,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxfjjvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.246Z","timestamp":1784473458246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxfjjvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:18 GMT\r\netag: W/\"1b-656839f9d647d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3111,"timings":{"blocked":2669,"dns":0,"connect":0,"send":0,"wait":442,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozwidau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.576Z","timestamp":1784473458576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozwidau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:05 GMT\r\netag: W/\"1b-65683a993229d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6204,"timings":{"blocked":5628,"dns":0,"connect":0,"send":0,"wait":576,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouqjwaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.495Z","timestamp":1784473456495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouqjwaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:43 GMT\r\netag: W/\"1b-655a6bcf110a9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5735,"timings":{"blocked":5039,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowjmbv7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.545Z","timestamp":1784473457545,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowjmbv7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2484,"timings":{"blocked":2156,"dns":0,"connect":0,"send":0,"wait":328,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoabpewh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.678Z","timestamp":1784473457678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoabpewh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:32 GMT\r\netag: W/\"1b-6565a91c37153\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4390,"timings":{"blocked":3877,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohvggsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.282Z","timestamp":1784473458282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohvggsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:39 GMT\r\netag: W/\"1b-65683a0d64236\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6383,"timings":{"blocked":5908,"dns":0,"connect":0,"send":0,"wait":475,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xifqyd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.741Z","timestamp":1784473458741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xifqyd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 03:24:01 GMT\r\netag: W/\"1b-6569ddad6cb7c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4198,"timings":{"blocked":3616,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xtgpar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.207Z","timestamp":1784473459207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xtgpar/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 03:34:30 GMT\r\netag: W/\"1b-656ee77b3922c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/fonts/fa-solid-900.woff2","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:27.122Z","timestamp":1784473467122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /templates/shaper_strings/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thelightrays.com/templates/shaper_strings/css/joomla-fontawesome.min.css\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78268\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: \"67096c5b-131bc\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78268,"size_decoded":78520,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-21T15:24:50.332972Z","times_seen":56092,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icontwppa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.937Z","timestamp":1784473455937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icontwppa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:37 GMT\r\netag: W/\"1b-6554c6f8fd574\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovyajlk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.638Z","timestamp":1784473456638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovyajlk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:35 GMT\r\netag: W/\"1b-655a6c016ca18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojapzee/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.667Z","timestamp":1784473456667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojapzee/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:48 GMT\r\netag: W/\"1b-655a6c0d1500c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoolrgku/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.510Z","timestamp":1784473456510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoolrgku/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:49 GMT\r\netag: W/\"1b-655a6bd544ee3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotnofli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.334Z","timestamp":1784473458334,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotnofli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:10 GMT\r\netag: W/\"1b-65683a2aac3ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoslsihn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.537Z","timestamp":1784473456537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoslsihn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:01 GMT\r\netag: W/\"1b-655a6be108a57\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoysxibw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.043Z","timestamp":1784473457043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoysxibw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:26 GMT\r\netag: W/\"1b-655be308c085b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6752,"timings":{"blocked":6179,"dns":0,"connect":0,"send":0,"wait":573,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoplcjje/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.268Z","timestamp":1784473457268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoplcjje/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:16 GMT\r\netag: W/\"1b-655e03ee7c0de\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomknyiu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.941Z","timestamp":1784473457941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomknyiu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:57 GMT\r\netag: W/\"1b-6567b87ac165d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5156,"timings":{"blocked":4677,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoixckab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.090Z","timestamp":1784473458090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoixckab/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:13 GMT\r\netag: W/\"1b-6567b8c3612d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5044,"timings":{"blocked":4039,"dns":0,"connect":0,"send":602,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxriuyc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.366Z","timestamp":1784473458366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxriuyc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:29 GMT\r\netag: W/\"1b-65683a3d83784\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6328,"timings":{"blocked":5768,"dns":0,"connect":0,"send":0,"wait":560,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojcicok/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.147Z","timestamp":1784473456147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojcicok/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 21:49:16 GMT\r\netag: W/\"1b-6556b6e0db911\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":930,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozbqogk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.922Z","timestamp":1784473456922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozbqogk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:28 GMT\r\netag: W/\"1b-655be2d15ae9d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6105,"timings":{"blocked":5642,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofgwpxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.091Z","timestamp":1784473457091,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofgwpxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2585,"timings":{"blocked":2067,"dns":0,"connect":0,"send":0,"wait":518,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icom8dgge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.044Z","timestamp":1784473459044,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icom8dgge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoymijen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.137Z","timestamp":1784473456137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoymijen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 16:22:02 GMT\r\netag: W/\"1b-65566dbc213ca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1010,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorwnykg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.006Z","timestamp":1784473457006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorwnykg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:10 GMT\r\netag: W/\"1b-655be2f9498be\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":630,"dns":0,"connect":0,"send":0,"wait":435,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xruqrv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.213Z","timestamp":1784473458213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xruqrv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 15:29:40 GMT\r\netag: W/\"1b-6567fc2479f15\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5059,"timings":{"blocked":4558,"dns":0,"connect":0,"send":0,"wait":501,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokrlyvs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.593Z","timestamp":1784473458593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokrlyvs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:10 GMT\r\netag: W/\"1b-65683a9dbe39b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5556,"timings":{"blocked":5161,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoumcepd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.674Z","timestamp":1784473457674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoumcepd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:31 GMT\r\netag: W/\"1b-6565a91b6cef3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokheegc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.933Z","timestamp":1784473457933,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokheegc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3714,"timings":{"blocked":3112,"dns":0,"connect":0,"send":0,"wait":602,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocceubn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.236Z","timestamp":1784473458236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocceubn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:08 GMT\r\netag: W/\"1b-656839efbd521\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7062,"timings":{"blocked":6513,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokjmlxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.396Z","timestamp":1784473458396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokjmlxy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:45 GMT\r\netag: W/\"1b-65683a4c73afe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodqrwlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.025Z","timestamp":1784473459025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodqrwlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:42 GMT\r\netag: W/\"1b-656d6712fda14\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6095,"timings":{"blocked":5835,"dns":0,"connect":0,"send":0,"wait":260,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodajoib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.700Z","timestamp":1784473455700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodajoib/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:43:44 GMT\r\netag: W/\"1b-65533319fac50\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovsclmn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.014Z","timestamp":1784473456014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovsclmn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 11:33:04 GMT\r\netag: W/\"1b-6554eb4891e41\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconoogot/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.063Z","timestamp":1784473456063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconoogot/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:23:56 GMT\r\netag: W/\"1b-65557cc2ada4e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":809,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosddbec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.358Z","timestamp":1784473456358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosddbec/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:55 GMT\r\netag: W/\"1b-655a6ba17b216\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaqbvqb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.091Z","timestamp":1784473458091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaqbvqb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:14 GMT\r\netag: W/\"1b-6567b8c3fe677\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6155,"timings":{"blocked":5825,"dns":0,"connect":0,"send":0,"wait":330,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoznhthh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.302Z","timestamp":1784473458302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoznhthh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:52 GMT\r\netag: W/\"1b-65683a1a52af1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoygxmoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.579Z","timestamp":1784473458579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoygxmoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:06 GMT\r\netag: W/\"1b-65683a99cf63d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":437,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaykvhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.902Z","timestamp":1784473458902,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaykvhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiywmiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.275Z","timestamp":1784473455275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiywmiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 17:04:11 GMT\r\netag: W/\"1b-65502dd54c600\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozoznav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.317Z","timestamp":1784473455317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozoznav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 05:55:41 GMT\r\netag: W/\"1b-6550da46d050b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotlrcrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.950Z","timestamp":1784473455950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotlrcrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:44 GMT\r\netag: W/\"1b-6554c6ff47b10\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icortdrxg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.215Z","timestamp":1784473456215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icortdrxg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 01:38:24 GMT\r\netag: W/\"1b-65582bf55a921\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosenscd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.250Z","timestamp":1784473456250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosenscd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 16:53:22 GMT\r\netag: W/\"1b-6558f877ea341\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogguxfi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.001Z","timestamp":1784473457001,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogguxfi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/esjulfgg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.555Z","timestamp":1784473457555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/esjulfgg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 13:23:48 GMT\r\netag: W/\"1b-6562d88c9a90f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6031,"timings":{"blocked":5616,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopqfqmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.432Z","timestamp":1784473455432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopqfqmw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 07:46:41 GMT\r\netag: W/\"1b-655234f38982c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxmjte/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.146Z","timestamp":1784473456146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxmjte/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 21:47:07 GMT\r\netag: W/\"1b-6556b6662a639\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosuikkl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.644Z","timestamp":1784473456644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosuikkl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:38 GMT\r\netag: W/\"1b-655a6c0386b76\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofkpsms/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.881Z","timestamp":1784473456881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofkpsms/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:12 GMT\r\netag: W/\"1b-655be2c1a5703\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/BDKR28_uswphl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.229Z","timestamp":1784473457229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/BDKR28_uswphl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 02:59:36 GMT\r\netag: W/\"1b-655d45911f08d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozecjvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.142Z","timestamp":1784473458142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozecjvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:43 GMT\r\netag: W/\"1b-6567b8e03fcbd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6100,"timings":{"blocked":5790,"dns":0,"connect":0,"send":0,"wait":310,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoapmrbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.268Z","timestamp":1784473458268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoapmrbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:30 GMT\r\netag: W/\"1b-65683a0541219\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":226,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xiiain/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.728Z","timestamp":1784473458728,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xiiain/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2662,"timings":{"blocked":2108,"dns":0,"connect":0,"send":0,"wait":554,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoffrzcs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.288Z","timestamp":1784473457288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoffrzcs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:35 GMT\r\netag: W/\"1b-655e9e00dc3b7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4535,"timings":{"blocked":4034,"dns":0,"connect":0,"send":0,"wait":501,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoisnpbw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.879Z","timestamp":1784473457879,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoisnpbw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbaaam/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.207Z","timestamp":1784473458207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbaaam/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 14:09:06 GMT\r\netag: W/\"1b-6567ea223d016\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5824,"timings":{"blocked":5406,"dns":0,"connect":0,"send":0,"wait":418,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico6sq9nz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.686Z","timestamp":1784473458686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico6sq9nz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 11:05:37 GMT\r\netag: W/\"1b-656902fd2a195\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopxbogl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.246Z","timestamp":1784473455246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopxbogl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:48:18 GMT\r\netag: W/\"1b-654fe739bc644\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokkoyoj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.846Z","timestamp":1784473455846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokkoyoj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:17:18 GMT\r\netag: W/\"1b-6553f65c30834\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorebhfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.859Z","timestamp":1784473455859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorebhfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:18:14 GMT\r\netag: W/\"1b-6553f6917ff81\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoquohzf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.041Z","timestamp":1784473457041,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoquohzf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovponzx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.742Z","timestamp":1784473457742,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovponzx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconowpzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.061Z","timestamp":1784473458061,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconowpzk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:57 GMT\r\netag: W/\"1b-6567b8b3b3826\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojhmxqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.485Z","timestamp":1784473456485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojhmxqv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:38 GMT\r\netag: W/\"1b-655a6bcadaead\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoprvtez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.987Z","timestamp":1784473456987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoprvtez/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:01 GMT\r\netag: W/\"1b-655be2f03c2b3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7449,"timings":{"blocked":7088,"dns":0,"connect":0,"send":0,"wait":361,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoygskmr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.049Z","timestamp":1784473458049,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoygskmr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:49 GMT\r\netag: W/\"1b-6567b8acd4b8d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodbwqqp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.135Z","timestamp":1784473458135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodbwqqp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:39 GMT\r\netag: W/\"1b-6567b8dc8a941\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4214,"timings":{"blocked":3680,"dns":0,"connect":0,"send":0,"wait":534,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokzhrgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.423Z","timestamp":1784473458423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokzhrgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:00 GMT\r\netag: W/\"1b-65683a5a81578\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4833,"timings":{"blocked":4439,"dns":0,"connect":0,"send":0,"wait":394,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_iulbch/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.973Z","timestamp":1784473458973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_iulbch/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 10:36:28 GMT\r\netag: W/\"1e-656cc21126ee2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosckzpw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.008Z","timestamp":1784473459008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosckzpw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:40 GMT\r\netag: W/\"1b-656d512a31294\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6576,"timings":{"blocked":6060,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoijuxad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.439Z","timestamp":1784473455439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoijuxad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 07:46:42 GMT\r\netag: W/\"1b-655234f45a7ec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobkcccx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.516Z","timestamp":1784473456516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobkcccx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:52 GMT\r\netag: W/\"1b-655a6bd867aa0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotsaeqw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.526Z","timestamp":1784473456526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotsaeqw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:57 GMT\r\netag: W/\"1b-655a6bdccca9b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozdbssz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.620Z","timestamp":1784473456620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozdbssz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:31 GMT\r\netag: W/\"1b-655a6bfccc0fc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxmlooz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.723Z","timestamp":1784473456723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxmlooz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:15 GMT\r\netag: W/\"1b-655a6c273c4f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxavfki/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.262Z","timestamp":1784473457262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxavfki/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:14 GMT\r\netag: W/\"1b-655e03ecd533f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoklvmwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.405Z","timestamp":1784473457405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoklvmwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:10:00 GMT\r\netag: W/\"1b-656100137202e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxgfdau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.855Z","timestamp":1784473457855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxgfdau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:06 GMT\r\netag: W/\"1b-6567b84a6586e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4344,"timings":{"blocked":3834,"dns":0,"connect":0,"send":0,"wait":510,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoypojzc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.037Z","timestamp":1784473456037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoypojzc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 20:54:16 GMT\r\netag: W/\"1b-655568b7fb51f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolckift/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.434Z","timestamp":1784473457434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolckift/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:13:25 GMT\r\netag: W/\"1b-656186f395ebd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconfmopm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.102Z","timestamp":1784473458102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconfmopm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:20 GMT\r\netag: W/\"1b-6567b8ca101d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6120,"timings":{"blocked":5808,"dns":0,"connect":0,"send":0,"wait":312,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoghppdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.506Z","timestamp":1784473458506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoghppdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:36 GMT\r\netag: W/\"1b-65683a7d31389\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4979,"timings":{"blocked":4512,"dns":0,"connect":0,"send":0,"wait":467,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooxdxos/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.613Z","timestamp":1784473458613,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooxdxos/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1827,"timings":{"blocked":1352,"dns":0,"connect":0,"send":0,"wait":475,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoguyccc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.920Z","timestamp":1784473458920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoguyccc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 04:47:58 GMT\r\netag: W/\"1b-656c742c2f856\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4140,"timings":{"blocked":3559,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovahcyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.366Z","timestamp":1784473455366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovahcyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 15:15:49 GMT\r\netag: W/\"1b-65515779d53ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolsntxj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.264Z","timestamp":1784473457264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolsntxj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:15 GMT\r\netag: W/\"1b-655e03ed85f5f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconsoclg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.834Z","timestamp":1784473457834,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconsoclg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolxljwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.712Z","timestamp":1784473458712,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolxljwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":23,"size_decoded":314,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a1794d5f51590c81c7efd0afe72658c5","sha1":"d0f5d8780ceb6fea8f697f1928e3c5239f6589ce","sha256":"f3cf7fae3a69aaa17f685d5743def45fb86058f167a05730ba36bb3893cbb35e","sha512":"ecc6a593558f015342d85449760664afd6452cce906c0a04de55275a62ba85bf862ce4ce764233847b93914be300af35d5db6fb7f7daa8aba1d212e39ab94e38","ssdeep":"","tlshash":"da7000a0820820c203a0c0028300222e0000b028c2283822e00a000c08c02000080ea8","first_seen":"2026-07-16T12:32:05.772484Z","last_seen":"2026-07-21T15:25:14.07438Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1792,"timings":{"blocked":1277,"dns":0,"connect":0,"send":0,"wait":515,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xfknum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.970Z","timestamp":1784473458970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xfknum/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 10:14:58 GMT\r\netag: W/\"1b-656cbd42c484c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xrewhw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.173Z","timestamp":1784473459173,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xrewhw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 01:54:51 GMT\r\netag: W/\"1b-656ed1354f25c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozyjeqh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.181Z","timestamp":1784473455181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozyjeqh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 17:09:13 GMT\r\netag: W/\"1b-654dab3a5042c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyhhumw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.397Z","timestamp":1784473458397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyhhumw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:46 GMT\r\netag: W/\"1b-65683a4d10e9d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5059,"timings":{"blocked":4580,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohvddup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.513Z","timestamp":1784473455513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohvddup/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 19:03:32 GMT\r\netag: W/\"1b-6552cc3d7be66\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofmigxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.726Z","timestamp":1784473457726,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofmigxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozdfmmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.065Z","timestamp":1784473458065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozdfmmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:59 GMT\r\netag: W/\"1b-6567b8b662084\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5355,"timings":{"blocked":4792,"dns":0,"connect":0,"send":0,"wait":563,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomhhser/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.430Z","timestamp":1784473458430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomhhser/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:04 GMT\r\netag: W/\"1b-65683a5e50ed6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5285,"timings":{"blocked":4938,"dns":0,"connect":0,"send":0,"wait":347,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokdmnud/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.455Z","timestamp":1784473458455,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokdmnud/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2865,"timings":{"blocked":2291,"dns":0,"connect":0,"send":0,"wait":574,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoumvuss/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.073Z","timestamp":1784473459073,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoumvuss/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico73u3ra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.493Z","timestamp":1784473455493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico73u3ra/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 17:55:10 GMT\r\netag: W/\"1b-6552bcf4faf1c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokuflgv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.390Z","timestamp":1784473456390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokuflgv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:08 GMT\r\netag: W/\"1b-655a6badc3a8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoktfore/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.461Z","timestamp":1784473456461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoktfore/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:28 GMT\r\netag: W/\"1b-655a6bc18d156\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":841,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icou673d4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.600Z","timestamp":1784473457600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icou673d4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 19:38:35 GMT\r\netag: W/\"1b-65646e2f5de5c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5448,"timings":{"blocked":44,"dns":0,"connect":0,"send":4824,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkizfh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.644Z","timestamp":1784473458644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkizfh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 00:03:55 GMT\r\netag: W/\"1b-65686f160e598\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6839,"timings":{"blocked":6445,"dns":0,"connect":0,"send":0,"wait":394,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconcqbdc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.331Z","timestamp":1784473456331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconcqbdc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 18:37:02 GMT\r\netag: W/\"1b-655a518128b9c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icormbcvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.418Z","timestamp":1784473456418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icormbcvt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:15 GMT\r\netag: W/\"1b-655a6bb49d903\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconvlikk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.863Z","timestamp":1784473456863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconvlikk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:04 GMT\r\netag: W/\"1b-655be2b9c7c56\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6452,"timings":{"blocked":6140,"dns":0,"connect":0,"send":0,"wait":312,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozkswuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.517Z","timestamp":1784473457517,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozkswuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowshnvr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.133Z","timestamp":1784473458133,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowshnvr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:38 GMT\r\netag: W/\"1b-6567b8db511a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowejzpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.015Z","timestamp":1784473459015,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowejzpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3137,"timings":{"blocked":2534,"dns":0,"connect":0,"send":0,"wait":603,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopdbhvr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.740Z","timestamp":1784473455740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopdbhvr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:54:15 GMT\r\netag: W/\"1b-65535045bb5c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooyfqae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.203Z","timestamp":1784473458203,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooyfqae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3635,"timings":{"blocked":3310,"dns":0,"connect":0,"send":0,"wait":325,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoveahhc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.640Z","timestamp":1784473458640,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoveahhc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolhbuxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.279Z","timestamp":1784473456279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolhbuxp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 00:24:55 GMT\r\netag: W/\"1b-65595d6602326\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomiuwkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.942Z","timestamp":1784473456942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomiuwkw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:36 GMT\r\netag: W/\"1b-655be2d8d5f2b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5484,"timings":{"blocked":5044,"dns":0,"connect":0,"send":0,"wait":440,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouuafen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.096Z","timestamp":1784473457096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouuafen/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:44 GMT\r\netag: W/\"1b-655be31943137\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6774,"timings":{"blocked":6274,"dns":0,"connect":0,"send":0,"wait":500,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoihkvso/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.761Z","timestamp":1784473457761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoihkvso/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:02 GMT\r\netag: W/\"1b-6566d9dff7b3f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaduxmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.273Z","timestamp":1784473455273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaduxmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 17:04:11 GMT\r\netag: W/\"1b-65502dd4e1ee1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohgchqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.737Z","timestamp":1784473455737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohgchqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:54:06 GMT\r\netag: W/\"1b-6553503e07ae7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovrrrpk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.793Z","timestamp":1784473455793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovrrrpk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 11:15:30 GMT\r\netag: W/\"1b-6553a57d9d35e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocejlox/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.787Z","timestamp":1784473455787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocejlox/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 09:23:03 GMT\r\netag: W/\"1b-65538c5ada98c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeutlmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.222Z","timestamp":1784473457222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeutlmt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 01:06:46 GMT\r\netag: W/\"1b-655d2c5998304\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotu5fjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.224Z","timestamp":1784473457224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotu5fjp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 01:59:57 GMT\r\netag: W/\"1b-655d383c385db\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/cox/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.313Z","timestamp":1784473457313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/cox/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 06:58:28 GMT\r\netag: W/\"1f-656c915721d3d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":31,"size_decoded":323,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"945a1e8a4deda8d589ef0e3500d44cf9","sha1":"e05588a044d0c4e167e70f5b5192f71d60124b9f","sha256":"78921de8b579786065160ebe040c5029a8d1efce6acc3b294ca41e9c092b2dbb","sha512":"12aacb5cc8b6b2826a02b00878217d03f507b5ae8b7b3efd1aeba9203580cf98c16124a31592e6911508edf9435734851297a795783a7713d63da0543907b1ae","ssdeep":"","tlshash":"5280003ae3a30088ce320b00803322222e8e22802832a2e88c80008e328a038c0223f8","first_seen":"2026-07-07T04:06:16.822388Z","last_seen":"2026-07-21T15:25:14.108487Z","times_seen":28,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxwuvta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.278Z","timestamp":1784473455278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxwuvta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 18:37:30 GMT\r\netag: W/\"1b-655042b09fd01\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoilkoxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.811Z","timestamp":1784473455811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoilkoxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:46:48 GMT\r\netag: W/\"1b-6553ef8ac1b0f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1018,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeaqvjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.421Z","timestamp":1784473457421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeaqvjr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 03:28:51 GMT\r\netag: W/\"1b-656111b419717\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7101,"timings":{"blocked":6687,"dns":0,"connect":0,"send":0,"wait":414,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovxrrws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.499Z","timestamp":1784473458499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovxrrws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:32 GMT\r\netag: W/\"1b-65683a793e7ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoywskpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.567Z","timestamp":1784473458567,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoywskpy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoenvylp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.052Z","timestamp":1784473459052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoenvylp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 01:54:30 GMT\r\netag: W/\"1b-656d8f434ae51\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5039,"timings":{"blocked":4797,"dns":0,"connect":0,"send":0,"wait":242,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xnjiop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.279Z","timestamp":1784473459279,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xnjiop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:18:32 GMT\r\netag: W/\"1b-656f41c9cdf69\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoerjasj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.046Z","timestamp":1784473457046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoerjasj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:28 GMT\r\netag: W/\"1b-655be309d0019\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopwywlj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.685Z","timestamp":1784473457685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopwywlj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:34 GMT\r\netag: W/\"1b-6565a91df7535\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5577,"timings":{"blocked":5263,"dns":0,"connect":0,"send":0,"wait":314,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icospk7m1/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.332Z","timestamp":1784473455332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icospk7m1/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 07:14:36 GMT\r\netag: W/\"1b-6550ebe9bf0ab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoabhukj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.451Z","timestamp":1784473455451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoabhukj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 15:47:53 GMT\r\netag: W/\"1b-6552a08180c25\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojldxvw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.557Z","timestamp":1784473456557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojldxvw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:08 GMT\r\netag: W/\"1b-655a6be76d5d1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomchtph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.901Z","timestamp":1784473457901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomchtph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:32 GMT\r\netag: W/\"1b-6567b863600d5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6560,"timings":{"blocked":6042,"dns":0,"connect":0,"send":0,"wait":518,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosdzmqs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.294Z","timestamp":1784473458294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosdzmqs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:47 GMT\r\netag: W/\"1b-65683a14ce933\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3750,"timings":{"blocked":3243,"dns":0,"connect":0,"send":0,"wait":507,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozwvblv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.439Z","timestamp":1784473458439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozwvblv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:09 GMT\r\netag: W/\"1b-65683a6361cd4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotr5x17/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.391Z","timestamp":1784473455391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotr5x17/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 23:42:03 GMT\r\netag: W/\"1b-6551c8a00b87f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorrduem/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.116Z","timestamp":1784473456116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorrduem/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 08:13:28 GMT\r\netag: W/\"1b-65560088d0bcf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopbrouz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.431Z","timestamp":1784473456431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopbrouz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:20 GMT\r\netag: W/\"1b-655a6bb9c5dfe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogndkac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.371Z","timestamp":1784473457371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogndkac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 05:42:10 GMT\r\netag: W/\"1b-655feda2c8c0a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkumre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.439Z","timestamp":1784473457439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkumre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:18:18 GMT\r\netag: W/\"1b-6561880aa7459\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohhpkwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.560Z","timestamp":1784473457560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohhpkwq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 15:19:22 GMT\r\netag: W/\"1b-6562f260f498b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5214,"timings":{"blocked":4764,"dns":0,"connect":0,"send":0,"wait":450,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogrklmg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.201Z","timestamp":1784473458201,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogrklmg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2090,"timings":{"blocked":1353,"dns":0,"connect":0,"send":0,"wait":737,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconiwxxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.514Z","timestamp":1784473458514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconiwxxn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:40 GMT\r\netag: W/\"1b-65683a8100ce8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":480,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouh94yr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.313Z","timestamp":1784473455313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouh94yr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 03:10:43 GMT\r\netag: W/\"1b-6550b56704109\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowuvzyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.845Z","timestamp":1784473456845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowuvzyo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:55 GMT\r\netag: W/\"1b-655be2b1f2e4a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobwgnsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.429Z","timestamp":1784473458429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobwgnsy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:03 GMT\r\netag: W/\"1b-65683a5db5a76\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xxzpfi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.708Z","timestamp":1784473458708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xxzpfi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 18:49:20 GMT\r\netag: W/\"1b-65696aa2ae9a8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5095,"timings":{"blocked":4777,"dns":0,"connect":0,"send":0,"wait":318,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/css/template.css","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.299Z","timestamp":1784473459299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /templates/shaper_strings/css/template.css HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Oct 2024 18:20:11 GMT\r\netag: W/\"67096c5b-22349\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":140105,"size_decoded":19351,"mime_type":"text/css","magic":"ASCII text","md5":"88a35db26a1b550186184ffdb0dfcfdf","sha1":"707c6aff7b779c6dd4d7bf03485f6337c8a4afbe","sha256":"a4d6032624022f2c610fdf79dad97f7f9c0afa848e889ec4cf1448b933d33f9d","sha512":"51ec94f3544435cc1f7d1a1096167cfe498256a15e6eca8c52a82e3f1a0af8f034662592cccaade96bceecab20bb2f4b09b4136e1a11d73d8b584e73920aaeea","ssdeep":"1536:5d+cHKtRN6XtSsx0hVJw6hfGLsz4ZJoajxXnCD23GkLcwGaxBAMxWMFRj1dS8e:8RqM4ZNnCD23GkbS","tlshash":"bad384e566f40940392bc694a6df67a47b285012c64fecf9eae2746cefc569081f334c","first_seen":"2026-07-19T15:05:15.506174Z","last_seen":"2026-07-19T15:05:15.506174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5073,"timings":{"blocked":4761,"dns":0,"connect":0,"send":0,"wait":312,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/templates/shaper_strings/js/bootstrap.min.js","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.318Z","timestamp":1784473459318,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /templates/shaper_strings/js/bootstrap.min.js HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":78080,"size_decoded":22282,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-07-21T15:04:43.732194Z","times_seen":2606,"resource_available":true,"data":null}},"time_used":1590,"timings":{"blocked":977,"dns":0,"connect":0,"send":0,"wait":613,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobgciiq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.304Z","timestamp":1784473456304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobgciiq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 07:39:46 GMT\r\netag: W/\"1b-6559be9868f48\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiqkioj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.485Z","timestamp":1784473457485,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiqkioj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobaiccb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.502Z","timestamp":1784473457502,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobaiccb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2312,"timings":{"blocked":1584,"dns":0,"connect":0,"send":0,"wait":728,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotkjgsu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.239Z","timestamp":1784473458239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotkjgsu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:12 GMT\r\netag: W/\"1b-656839f3e2d7f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6968,"timings":{"blocked":6519,"dns":0,"connect":0,"send":0,"wait":449,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouepurq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.264Z","timestamp":1784473458264,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouepurq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2189,"timings":{"blocked":1576,"dns":0,"connect":0,"send":0,"wait":613,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopvjfds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.624Z","timestamp":1784473458624,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopvjfds/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovwiiid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.665Z","timestamp":1784473458665,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovwiiid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3311,"timings":{"blocked":2756,"dns":0,"connect":0,"send":0,"wait":555,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogtempj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.029Z","timestamp":1784473459029,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogtempj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:43 GMT\r\netag: W/\"1b-656d671414ed2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotgujuz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.171Z","timestamp":1784473456171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotgujuz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 00:55:00 GMT\r\netag: W/\"1b-6556e064694fb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyzrobr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.528Z","timestamp":1784473456528,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyzrobr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconqcnkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.849Z","timestamp":1784473456849,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconqcnkf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3999,"timings":{"blocked":3403,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxluikk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.763Z","timestamp":1784473457763,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxluikk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2372,"timings":{"blocked":1765,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohxanrl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.019Z","timestamp":1784473459019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohxanrl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:38 GMT\r\netag: W/\"1b-656d670f5039b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoouxqlz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.920Z","timestamp":1784473457920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoouxqlz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:44 GMT\r\netag: W/\"1b-6567b86e8b6ca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6514,"timings":{"blocked":5934,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxzqisb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.401Z","timestamp":1784473458401,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxzqisb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2900,"timings":{"blocked":2345,"dns":0,"connect":0,"send":0,"wait":555,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxvsnwb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.840Z","timestamp":1784473458840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxvsnwb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:44:10 GMT\r\netag: W/\"1b-656b4c4769c3c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqcoplo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.181Z","timestamp":1784473459181,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqcoplo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolmis82/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.374Z","timestamp":1784473455374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolmis82/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 16:17:35 GMT\r\netag: W/\"1b-65516548183fd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icongvhgl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.397Z","timestamp":1784473455397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icongvhgl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 00:06:56 GMT\r\netag: W/\"1b-6551ce3055798\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorfzegy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.100Z","timestamp":1784473456100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorfzegy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 03:27:04 GMT\r\netag: W/\"1b-6555c083fc7ca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowrhyvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.866Z","timestamp":1784473456866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowrhyvi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:05 GMT\r\netag: W/\"1b-655be2bb89f72\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6841,"timings":{"blocked":6441,"dns":0,"connect":0,"send":0,"wait":400,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoowspjw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.010Z","timestamp":1784473457010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoowspjw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:12 GMT\r\netag: W/\"1b-655be2fb6e5fa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":629,"dns":0,"connect":0,"send":0,"wait":285,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosaloht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.168Z","timestamp":1784473458168,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosaloht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoobdqwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.717Z","timestamp":1784473458717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoobdqwh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 01:13:24 GMT\r\netag: W/\"1b-6569c07b3735d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2016,"timings":{"blocked":1635,"dns":0,"connect":0,"send":0,"wait":381,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocaunxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.039Z","timestamp":1784473459039,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocaunxw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozhfbst/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.987Z","timestamp":1784473455987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozhfbst/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:59 GMT\r\netag: W/\"1b-6554c70ddd166\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowacbix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.008Z","timestamp":1784473457008,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowacbix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:11 GMT\r\netag: W/\"1b-655be2fa5afbc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_puyihx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.628Z","timestamp":1784473457628,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_puyihx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3175,"timings":{"blocked":2621,"dns":0,"connect":0,"send":0,"wait":554,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohsxipq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.235Z","timestamp":1784473459235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohsxipq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 07:34:18 GMT\r\netag: W/\"1b-656f1d148936c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4930,"timings":{"blocked":4569,"dns":0,"connect":0,"send":0,"wait":361,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icou6okys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.344Z","timestamp":1784473455344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icou6okys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 09:25:25 GMT\r\netag: W/\"1b-65510927356d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokiowwc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.756Z","timestamp":1784473455756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokiowwc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:55:41 GMT\r\netag: W/\"1b-655350989b2ac\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoffonmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.826Z","timestamp":1784473455826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoffonmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:46:55 GMT\r\netag: W/\"1b-6553ef91738e7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoimwmet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.132Z","timestamp":1784473456132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoimwmet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 13:57:11 GMT\r\netag: W/\"1b-65564d5b9b42e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico8r9p4pg5t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.189Z","timestamp":1784473456189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico8r9p4pg5t/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 13:21:26 GMT\r\netag: W/\"1b-6557873beedd5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyfiggs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.538Z","timestamp":1784473456538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyfiggs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:02 GMT\r\netag: W/\"1b-655a6be198337\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohmoddz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.634Z","timestamp":1784473456634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohmoddz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:33 GMT\r\netag: W/\"1b-655a6bff5c4fa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxucm21/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.219Z","timestamp":1784473457219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxucm21/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 00:40:32 GMT\r\netag: W/\"1b-655d267c7f864\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozxqdh4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.831Z","timestamp":1784473456831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozxqdh4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:35:47 GMT\r\netag: W/\"1b-655bbb534b045\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogcmhhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.327Z","timestamp":1784473457327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogcmhhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 21:29:11 GMT\r\netag: W/\"1b-655f7f71bcaf8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosur9kq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.687Z","timestamp":1784473457687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosur9kq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 20:23:45 GMT\r\netag: W/\"1b-6565ba24bc9ed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5905,"timings":{"blocked":5444,"dns":0,"connect":0,"send":0,"wait":461,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopehdcu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.728Z","timestamp":1784473455728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopehdcu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:53:38 GMT\r\netag: W/\"1b-65535022ba6d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolxxixn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.941Z","timestamp":1784473455941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolxxixn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:40 GMT\r\netag: W/\"1b-6554c6fbdabd3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocduxde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.439Z","timestamp":1784473456439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocduxde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:24 GMT\r\netag: W/\"1b-655a6bbce6a7b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomadtcq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.664Z","timestamp":1784473456664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomadtcq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:46 GMT\r\netag: W/\"1b-655a6c0b80b4e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyuizeg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.713Z","timestamp":1784473456713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyuizeg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:10 GMT\r\netag: W/\"1b-655a6c22074d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqhkvl3/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.763Z","timestamp":1784473456763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqhkvl3/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 06:21:16 GMT\r\netag: W/\"1b-655aeeea61022\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnrhmh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.144Z","timestamp":1784473457144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnrhmh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:09 GMT\r\netag: W/\"1b-655be3318ae22\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnhyku/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.914Z","timestamp":1784473457914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnhyku/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:39 GMT\r\netag: W/\"1b-6567b86a18c0e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5376,"timings":{"blocked":4680,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobofda4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.359Z","timestamp":1784473455359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobofda4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 13:31:42 GMT\r\netag: W/\"1b-65514033d2034\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icociacha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.994Z","timestamp":1784473456994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icociacha/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:04 GMT\r\netag: W/\"1b-655be2f36f80c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4485,"timings":{"blocked":3988,"dns":0,"connect":0,"send":0,"wait":497,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2neav5b/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.236Z","timestamp":1784473457236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2neav5b/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 13:07:32 GMT\r\netag: W/\"1b-655dcd7426081\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5595,"timings":{"blocked":4899,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xnjnga/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.422Z","timestamp":1784473457422,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xnjnga/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xwewml/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.622Z","timestamp":1784473457622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xwewml/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 04:09:15 GMT\r\netag: W/\"1b-6564e053d91e8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6600,"timings":{"blocked":83,"dns":0,"connect":0,"send":6022,"wait":495,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icownckdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.129Z","timestamp":1784473458129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icownckdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:36 GMT\r\netag: W/\"1b-6567b8d982363\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6472,"timings":{"blocked":5878,"dns":0,"connect":0,"send":0,"wait":594,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icociwisr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.134Z","timestamp":1784473458134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icociwisr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:39 GMT\r\netag: W/\"1b-6567b8dbf1421\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosxqfsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.723Z","timestamp":1784473458723,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosxqfsa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopffgah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.377Z","timestamp":1784473455377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopffgah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 21:06:04 GMT\r\netag: W/\"1b-6551a5c29f8b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogsbile/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.382Z","timestamp":1784473455382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogsbile/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 21:16:52 GMT\r\netag: W/\"1b-6551a82c93b05\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodwmreg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.952Z","timestamp":1784473456952,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodwmreg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icommtrws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.655Z","timestamp":1784473457655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icommtrws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:59 GMT\r\netag: W/\"1b-6565a686b65a1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7057,"timings":{"blocked":6638,"dns":0,"connect":0,"send":0,"wait":419,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocrnolb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.722Z","timestamp":1784473457722,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocrnolb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:41 GMT\r\netag: W/\"1b-65664f36e0b1e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojoocvp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.449Z","timestamp":1784473458449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojoocvp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:16 GMT\r\netag: W/\"1b-65683a69b9d31\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5128,"timings":{"blocked":4548,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icod0yeyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.846Z","timestamp":1784473458846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icod0yeyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 07:55:41 GMT\r\netag: W/\"1b-656b5c4373b3c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6144,"timings":{"blocked":5680,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5vw1d7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.319Z","timestamp":1784473455319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5vw1d7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 05:55:45 GMT\r\netag: W/\"1b-6550da4a9b054\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofrowvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.068Z","timestamp":1784473456068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofrowvo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:33:44 GMT\r\netag: W/\"1b-65558c5d10a93\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogvrhlr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.225Z","timestamp":1784473456225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogvrhlr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 07:23:07 GMT\r\netag: W/\"1b-6558790215ce3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoraidpi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.674Z","timestamp":1784473456674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoraidpi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:50 GMT\r\netag: W/\"1b-655a6c0fb9c2a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomyefhn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.173Z","timestamp":1784473457173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomyefhn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:23 GMT\r\netag: W/\"1b-655be33e69cc6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosyfrzf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.352Z","timestamp":1784473458352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosyfrzf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:20 GMT\r\netag: W/\"1b-65683a3517387\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5837,"timings":{"blocked":5458,"dns":0,"connect":0,"send":0,"wait":379,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodxlswf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.842Z","timestamp":1784473458842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodxlswf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 07:09:23 GMT\r\netag: W/\"1b-656b51ea1d943\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4162,"timings":{"blocked":3580,"dns":0,"connect":0,"send":0,"wait":582,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovnxgyx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.877Z","timestamp":1784473458877,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovnxgyx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxrgxtq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.396Z","timestamp":1784473455396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxrgxtq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 00:06:54 GMT\r\netag: W/\"1b-6551ce2eb7699\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojumigh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.999Z","timestamp":1784473455999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojumigh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 09:52:08 GMT\r\netag: W/\"1b-6554d4b888b30\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconukjxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.099Z","timestamp":1784473457099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconukjxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:45 GMT\r\netag: W/\"1b-655be31add3b3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqnithf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.316Z","timestamp":1784473457316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqnithf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 20:55:30 GMT\r\netag: W/\"1b-655f77eaee3c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4480,"timings":{"blocked":4009,"dns":0,"connect":0,"send":0,"wait":471,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxk8hg4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.746Z","timestamp":1784473457746,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxk8hg4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoahnfaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.173Z","timestamp":1784473455173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoahnfaf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 12:17:22 GMT\r\netag: W/\"1b-654d69fe26ca2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoonlrta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.878Z","timestamp":1784473456878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoonlrta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:10 GMT\r\netag: W/\"1b-655be2c0056c7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoabibus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.445Z","timestamp":1784473457445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoabibus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:22:11 GMT\r\netag: W/\"1b-656188e8c1a09\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosdofaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.552Z","timestamp":1784473457552,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosdofaw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2482,"timings":{"blocked":2153,"dns":0,"connect":0,"send":0,"wait":329,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xlyiun/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.713Z","timestamp":1784473457713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xlyiun/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 03:01:00 GMT\r\netag: W/\"1b-656612f04d7a3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4524,"timings":{"blocked":4055,"dns":0,"connect":0,"send":0,"wait":469,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotmyros/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.355Z","timestamp":1784473458355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotmyros/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:23 GMT\r\netag: W/\"1b-65683a3714fc6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7012,"timings":{"blocked":6698,"dns":0,"connect":0,"send":0,"wait":314,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouicfqp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.464Z","timestamp":1784473458464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouicfqp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:20 GMT\r\netag: W/\"1b-65683a6e47d70\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4397,"timings":{"blocked":3816,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozqp4pj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.652Z","timestamp":1784473458652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozqp4pj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 01:28:43 GMT\r\netag: W/\"1b-6568820a858e6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorbpwsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.605Z","timestamp":1784473456605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorbpwsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:25 GMT\r\netag: W/\"1b-655a6bf79bf01\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icov9zcc6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.599Z","timestamp":1784473457599,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icov9zcc6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3182,"timings":{"blocked":43,"dns":0,"connect":0,"send":2590,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocrincv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.060Z","timestamp":1784473458060,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocrincv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3726,"timings":{"blocked":3249,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xqwzjf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.171Z","timestamp":1784473459171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xqwzjf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 01:54:51 GMT\r\netag: W/\"1b-656ed134b5d3d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4707,"timings":{"blocked":4011,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyrznrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.588Z","timestamp":1784473455588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyrznrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:29 GMT\r\netag: W/\"1b-6552f55af31de\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovfceew/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.061Z","timestamp":1784473456061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovfceew/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:23:31 GMT\r\netag: W/\"1b-65557cab11b3a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodcibcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.083Z","timestamp":1784473456083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodcibcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:35:17 GMT\r\netag: W/\"1b-65558cb62556e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":968,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogqypac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.179Z","timestamp":1784473456179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogqypac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 06:39:59 GMT\r\netag: W/\"1b-65572d8064934\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoatmxiz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.460Z","timestamp":1784473456460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoatmxiz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:28 GMT\r\netag: W/\"1b-655a6bc10a397\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":794,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovzqprc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.622Z","timestamp":1784473456622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovzqprc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:32 GMT\r\netag: W/\"1b-655a6bfdd2c1b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofpaigq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.684Z","timestamp":1784473456684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofpaigq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:55 GMT\r\netag: W/\"1b-655a6c13ebfa6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icootkylr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.978Z","timestamp":1784473456978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icootkylr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:57 GMT\r\netag: W/\"1b-655be2ec7d2fc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojcgxcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.365Z","timestamp":1784473455365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojcgxcj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 14:19:39 GMT\r\netag: W/\"1b-65514aebe05c4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico77jqt07zht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.135Z","timestamp":1784473456135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico77jqt07zht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 15:18:44 GMT\r\netag: W/\"1b-65565f9600e42\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1012,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomffdcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.521Z","timestamp":1784473456521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomffdcy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:55 GMT\r\netag: W/\"1b-655a6bdab487d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7554,"timings":{"blocked":7014,"dns":0,"connect":0,"send":0,"wait":540,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotpibpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.078Z","timestamp":1784473457078,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotpibpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3962,"timings":{"blocked":3405,"dns":0,"connect":0,"send":0,"wait":557,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodvevem/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.104Z","timestamp":1784473457104,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodvevem/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2585,"timings":{"blocked":2073,"dns":0,"connect":0,"send":0,"wait":512,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorhbhzv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.706Z","timestamp":1784473457706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorhbhzv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 00:22:34 GMT\r\netag: W/\"1b-6565ef85d3f0e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5554,"timings":{"blocked":5018,"dns":0,"connect":0,"send":0,"wait":536,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooqxnub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.485Z","timestamp":1784473458485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooqxnub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:29 GMT\r\netag: W/\"1b-65683a7664fcc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6832,"timings":{"blocked":6378,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xsvrug/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.216Z","timestamp":1784473459216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xsvrug/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 05:16:39 GMT\r\netag: W/\"1b-656efe502dbcf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1773,"timings":{"blocked":1458,"dns":0,"connect":0,"send":0,"wait":315,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopwjsnq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.541Z","timestamp":1784473456541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopwjsnq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:03 GMT\r\netag: W/\"1b-655a6be23b496\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojmlzdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.981Z","timestamp":1784473456981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojmlzdp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:58 GMT\r\netag: W/\"1b-655be2ed918da\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqeccrh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.596Z","timestamp":1784473455596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqeccrh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:30 GMT\r\netag: W/\"1b-6552f55bf6e1d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoozepid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.670Z","timestamp":1784473455670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoozepid/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:42:08 GMT\r\netag: W/\"1b-655332bdf71d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokamoru/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.395Z","timestamp":1784473456395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokamoru/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:09 GMT\r\netag: W/\"1b-655a6baf55068\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokjgbzc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.739Z","timestamp":1784473456739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokjgbzc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:23 GMT\r\netag: W/\"1b-655a6c2f0096b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofjmntt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.022Z","timestamp":1784473457022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofjmntt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:18 GMT\r\netag: W/\"1b-655be300c0acd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5616,"timings":{"blocked":5036,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosiraln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.821Z","timestamp":1784473458821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosiraln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:21:24 GMT\r\netag: W/\"1b-656b4730503d6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5369,"timings":{"blocked":4906,"dns":0,"connect":0,"send":0,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotclmdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.148Z","timestamp":1784473456148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotclmdm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 22:57:33 GMT\r\netag: W/\"1b-6556c6240b3bd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodioypm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.582Z","timestamp":1784473456582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodioypm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:16 GMT\r\netag: W/\"1b-655a6beec732a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6194,"timings":{"blocked":5717,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowmdemy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.201Z","timestamp":1784473457201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowmdemy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 01:55:50 GMT\r\netag: W/\"1b-655bf57363930\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowrrjdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.988Z","timestamp":1784473457988,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowrrjdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:18 GMT\r\netag: W/\"1b-6567b88f2cee9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodcgdie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.046Z","timestamp":1784473458046,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodcgdie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2185,"timings":{"blocked":1456,"dns":0,"connect":0,"send":0,"wait":729,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojmuyrq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.365Z","timestamp":1784473458365,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojmuyrq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolorqrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.573Z","timestamp":1784473458573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolorqrm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:04 GMT\r\netag: W/\"1b-65683a97c8d5e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4642,"timings":{"blocked":4349,"dns":0,"connect":0,"send":0,"wait":293,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolxgoxj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.604Z","timestamp":1784473455604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolxgoxj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:31 GMT\r\netag: W/\"1b-6552f55ca2c1c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotnxqsk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.562Z","timestamp":1784473456562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotnxqsk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:10 GMT\r\netag: W/\"1b-655a6be90590f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoguqbot/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.673Z","timestamp":1784473456673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoguqbot/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:50 GMT\r\netag: W/\"1b-655a6c0f35eca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoryytrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.576Z","timestamp":1784473457576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoryytrn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 00:04:01 GMT\r\netag: W/\"1b-656367a60f80d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xljsqx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.797Z","timestamp":1784473457797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xljsqx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:56:09 GMT\r\netag: W/\"1b-6567895c53792\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7220,"timings":{"blocked":6679,"dns":0,"connect":0,"send":0,"wait":541,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolbrner/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.095Z","timestamp":1784473458095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolbrner/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:16 GMT\r\netag: W/\"1b-6567b8c5d9036\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5334,"timings":{"blocked":4892,"dns":0,"connect":0,"send":0,"wait":442,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqykltw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.581Z","timestamp":1784473458581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqykltw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:08 GMT\r\netag: W/\"1b-65683a9b2723c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoslnlwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.218Z","timestamp":1784473455218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoslnlwo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 17:16:51 GMT\r\netag: W/\"1b-654eeecc03deb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiczeto/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.417Z","timestamp":1784473456417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiczeto/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:14 GMT\r\netag: W/\"1b-655a6bb419ba3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoshrsnj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.498Z","timestamp":1784473456498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoshrsnj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:44 GMT\r\netag: W/\"1b-655a6bd09b927\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6217,"timings":{"blocked":4554,"dns":0,"connect":0,"send":1187,"wait":476,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconemlhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.060Z","timestamp":1784473457060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconemlhy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:33 GMT\r\netag: W/\"1b-655be30e97a2e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6438,"timings":{"blocked":6095,"dns":0,"connect":0,"send":0,"wait":343,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovkzoes/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.202Z","timestamp":1784473457202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovkzoes/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 01:55:54 GMT\r\netag: W/\"1b-655bf57775910\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozvisde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.374Z","timestamp":1784473457374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozvisde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 15:21:36 GMT\r\netag: W/\"1b-65606f2628d9b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorehzls/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.026Z","timestamp":1784473458026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorehzls/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:38 GMT\r\netag: W/\"1b-6567b8a183438\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5601,"timings":{"blocked":5233,"dns":0,"connect":0,"send":0,"wait":368,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyoltyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.414Z","timestamp":1784473458414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyoltyb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:55 GMT\r\netag: W/\"1b-65683a55fe11a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6274,"timings":{"blocked":5629,"dns":0,"connect":0,"send":0,"wait":645,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/components/com_sppagebuilder/assets/css/dynamic-content.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.166Z","timestamp":1784473455166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /components/com_sppagebuilder/assets/css/dynamic-content.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 May 2025 00:49:50 GMT\r\netag: W/\"68195cae-551\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1361,"size_decoded":631,"mime_type":"text/css","magic":"ASCII text, with very long lines (1361), with no line terminators","md5":"665e7beda7002003480e6fa475f9d4e4","sha1":"fb27d50560ac05779d24fc0d8eb565966265d777","sha256":"9edc6f0897cd04e403b57931ec97da36840b0e38d9a5c2ac108b44eb595f3cff","sha512":"b15f7f3287197c3a9a1e115344a12c581aae2892086f65eb603864dfce238152eb575a49960442341960f3cb540827afcb41895a608caeb39bde9245e424e035","ssdeep":"","tlshash":"3a2167b21611252836bbd23618be76c9a030c800d1574e8ce8da7fa8c7fa21737d63dd","first_seen":"2025-04-04T23:35:45.39911Z","last_seen":"2026-07-21T09:07:52.198232Z","times_seen":646,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico5toahf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.239Z","timestamp":1784473455239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico5toahf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 10:19:54 GMT\r\netag: W/\"1b-654fd37736b21\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofbwcws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.610Z","timestamp":1784473455610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofbwcws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 01:41:59 GMT\r\netag: W/\"1b-6553254c6a531\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqhcdwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.983Z","timestamp":1784473455983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqhcdwe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:56 GMT\r\netag: W/\"1b-6554c70b1fea8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":967,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokwjznp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.450Z","timestamp":1784473456450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokwjznp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:26 GMT\r\netag: W/\"1b-655a6bbef7f39\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomloczx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.712Z","timestamp":1784473456712,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomloczx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeantfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.974Z","timestamp":1784473456974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeantfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:55 GMT\r\netag: W/\"1b-655be2ea59561\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5619,"timings":{"blocked":4923,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowtydhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.119Z","timestamp":1784473458119,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowtydhq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3655,"timings":{"blocked":3052,"dns":0,"connect":0,"send":0,"wait":603,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqokydn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.517Z","timestamp":1784473456517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqokydn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:53 GMT\r\netag: W/\"1b-655a6bd92135f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxqyaqg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.356Z","timestamp":1784473457356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxqyaqg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:56 GMT\r\netag: W/\"1b-655faa87060ad\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4822,"timings":{"blocked":4249,"dns":0,"connect":0,"send":0,"wait":573,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconsbedy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.456Z","timestamp":1784473457456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconsbedy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:27:11 GMT\r\netag: W/\"1b-65618a0782c0c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":5554,"wait":463,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotfxtfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.486Z","timestamp":1784473458486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotfxtfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:30 GMT\r\netag: W/\"1b-65683a77236ac\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3952,"timings":{"blocked":3451,"dns":0,"connect":0,"send":0,"wait":501,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokxiokp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.572Z","timestamp":1784473458572,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokxiokp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:03 GMT\r\netag: W/\"1b-65683a972d8fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolsqmyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.667Z","timestamp":1784473458667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolsqmyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 05:23:00 GMT\r\netag: W/\"1b-6568b667d9f46\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5451,"timings":{"blocked":4989,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowsnwrh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.742Z","timestamp":1784473455742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowsnwrh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:54:23 GMT\r\netag: W/\"1b-6553504de821d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxbvhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.474Z","timestamp":1784473456474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxbvhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:33 GMT\r\netag: W/\"1b-655a6bc62f9b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokuueui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.190Z","timestamp":1784473457190,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokuueui/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:32 GMT\r\netag: W/\"1b-655be346fa2d4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoraokrk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.084Z","timestamp":1784473458084,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoraokrk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3760,"timings":{"blocked":3395,"dns":0,"connect":0,"send":0,"wait":365,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoecbziw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.394Z","timestamp":1784473458394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoecbziw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:44 GMT\r\netag: W/\"1b-65683a4b3b2fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoop2op6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.284Z","timestamp":1784473459284,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoop2op6/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2391,"timings":{"blocked":1943,"dns":0,"connect":0,"send":0,"wait":448,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopj5h12/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.761Z","timestamp":1784473456761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopj5h12/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 06:01:12 GMT\r\netag: W/\"1b-655aea6da2d1e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icospxoyp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.898Z","timestamp":1784473456898,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icospxoyp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoatrfux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.198Z","timestamp":1784473457198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoatrfux/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:34 GMT\r\netag: W/\"1b-655be349a8b2f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoviqvxs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.246Z","timestamp":1784473457246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoviqvxs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:35 GMT\r\netag: W/\"1b-655deb6a74fbf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolgucnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.583Z","timestamp":1784473457583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolgucnk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 02:10:39 GMT\r\netag: W/\"1b-656383f45a30c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoshcgnu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.649Z","timestamp":1784473455649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoshcgnu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 02:21:21 GMT\r\netag: W/\"1b-65532e1962c11\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqjxzzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.724Z","timestamp":1784473455724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqjxzzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:30:04 GMT\r\netag: W/\"1b-65534adebaaea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoldojym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.187Z","timestamp":1784473456187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoldojym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 12:27:27 GMT\r\netag: W/\"1b-65577b2ae738a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icop11kj8/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.200Z","timestamp":1784473456200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icop11kj8/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 17:58:44 GMT\r\netag: W/\"1b-6557c53759422\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodiorok/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.677Z","timestamp":1784473456677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodiorok/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:52 GMT\r\netag: W/\"1b-655a6c114a268\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokq483c/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.750Z","timestamp":1784473456750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokq483c/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 01:59:12 GMT\r\netag: W/\"1b-655ab45644473\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowcqclj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.326Z","timestamp":1784473458326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowcqclj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:04 GMT\r\netag: W/\"1b-65683a25c45ed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5168,"timings":{"blocked":4472,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowjwgzz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.699Z","timestamp":1784473458699,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowjwgzz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofdpioi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.649Z","timestamp":1784473456649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofdpioi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:40 GMT\r\netag: W/\"1b-655a6c059beb4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotdwmtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.196Z","timestamp":1784473458196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotdwmtt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:04 GMT\r\netag: W/\"1b-6567b8f37f86c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6527,"timings":{"blocked":6059,"dns":0,"connect":0,"send":0,"wait":468,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyyweka/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.512Z","timestamp":1784473458512,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyyweka/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3428,"timings":{"blocked":2825,"dns":0,"connect":0,"send":0,"wait":603,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoebiuzu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.271Z","timestamp":1784473455271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoebiuzu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 17:04:10 GMT\r\netag: W/\"1b-65502dd46cbe1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozirrap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.504Z","timestamp":1784473455504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozirrap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 18:57:26 GMT\r\netag: W/\"1b-6552cae06e278\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofkkgrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.350Z","timestamp":1784473456350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofkkgrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:51 GMT\r\netag: W/\"1b-655a6b9d8863a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodqbvpr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.642Z","timestamp":1784473458642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodqbvpr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 00:03:54 GMT\r\netag: W/\"1b-65686f14be697\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5521,"timings":{"blocked":3694,"dns":0,"connect":0,"send":1432,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoalhzhu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.206Z","timestamp":1784473455206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoalhzhu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 10:49:01 GMT\r\netag: W/\"1b-654e981c95491\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/yaxztfwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.378Z","timestamp":1784473457378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/yaxztfwt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 22:44:05 GMT\r\netag: W/\"1b-6560d20ce277f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/htusf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.814Z","timestamp":1784473458814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /htusf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 02:58:51 GMT\r\netag: W/\"1b-656b19eae3f8b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5370,"timings":{"blocked":4909,"dns":0,"connect":0,"send":0,"wait":461,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojwxqfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.841Z","timestamp":1784473456841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojwxqfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:52 GMT\r\netag: W/\"1b-655be2aeef692\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkvzre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.557Z","timestamp":1784473457557,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkvzre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovajmri/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.899Z","timestamp":1784473457899,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovajmri/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoclanet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.440Z","timestamp":1784473458440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoclanet/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:10 GMT\r\netag: W/\"1b-65683a64b4ab4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4407,"timings":{"blocked":3827,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconrwoiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.564Z","timestamp":1784473458564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconrwoiw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:59 GMT\r\netag: W/\"1b-65683a9333020\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6630,"timings":{"blocked":6217,"dns":0,"connect":0,"send":0,"wait":413,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqzssfu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.832Z","timestamp":1784473457832,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqzssfu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:20 GMT\r\netag: W/\"1b-6567997eb9b66\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomeswbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.279Z","timestamp":1784473455279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomeswbx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 18:37:31 GMT\r\netag: W/\"1b-655042b130583\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohhulrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.192Z","timestamp":1784473456192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohhulrg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 15:02:40 GMT\r\netag: W/\"1b-65579ddcaba5e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaufspd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.773Z","timestamp":1784473456773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaufspd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 11:25:05 GMT\r\netag: W/\"1b-655b32d23991f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiefijw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.151Z","timestamp":1784473457151,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiefijw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3944,"timings":{"blocked":3348,"dns":0,"connect":0,"send":0,"wait":596,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbjbxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.121Z","timestamp":1784473458121,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbjbxm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:31 GMT\r\netag: W/\"1b-6567b8d47b1a8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocmgqqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.873Z","timestamp":1784473455873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocmgqqj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:18:59 GMT\r\netag: W/\"1b-6553f6bc992b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocutpuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.121Z","timestamp":1784473456121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocutpuw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 12:11:43 GMT\r\netag: W/\"1b-655635c8d1a26\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":957,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosoecmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.587Z","timestamp":1784473456587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosoecmf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:18 GMT\r\netag: W/\"1b-655a6bf05a848\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiuffoa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.408Z","timestamp":1784473457408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiuffoa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:10:01 GMT\r\netag: W/\"1b-65610014ab7ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2wh07u/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.538Z","timestamp":1784473457538,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2wh07u/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3817,"timings":{"blocked":3222,"dns":0,"connect":0,"send":0,"wait":595,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xijqdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.788Z","timestamp":1784473458788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xijqdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 08:10:58 GMT\r\netag: W/\"1b-656a1dd06a296\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3857,"timings":{"blocked":3352,"dns":0,"connect":0,"send":0,"wait":505,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoagkifa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.089Z","timestamp":1784473456089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoagkifa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:36:14 GMT\r\netag: W/\"1b-65558cebd47f7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico7827v3b/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.338Z","timestamp":1784473456338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico7827v3b/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 19:14:34 GMT\r\netag: W/\"1b-655a59e571667\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotmirfm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.265Z","timestamp":1784473457265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotmirfm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 17:11:16 GMT\r\netag: W/\"1b-655e03ee38abe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4477,"timings":{"blocked":3965,"dns":0,"connect":0,"send":0,"wait":512,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodwnbcg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.288Z","timestamp":1784473457288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodwnbcg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:34 GMT\r\netag: W/\"1b-655e9e00c6bf7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoebbjah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.221Z","timestamp":1784473457221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoebbjah/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 01:05:23 GMT\r\netag: W/\"1b-655d2c0a77630\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobkhysr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.494Z","timestamp":1784473457494,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobkhysr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 20:03:48 GMT\r\netag: W/\"1b-6561f01770633\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosyduxt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.507Z","timestamp":1784473457507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosyduxt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:10:24 GMT\r\netag: W/\"1b-6561fef9f6f4b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5971,"timings":{"blocked":4339,"dns":0,"connect":0,"send":1295,"wait":337,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconvtgkt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.999Z","timestamp":1784473458999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconvtgkt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:35 GMT\r\netag: W/\"1b-656d5124c18d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxgsgol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.187Z","timestamp":1784473455187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxgsgol/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 18:52:37 GMT\r\netag: W/\"1b-654dc2570ef05\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoibwzrr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.467Z","timestamp":1784473456467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoibwzrr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:31 GMT\r\netag: W/\"1b-655a6bc3a0554\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodkfpwr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.886Z","timestamp":1784473456886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodkfpwr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:13 GMT\r\netag: W/\"1b-655be2c2bdb60\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovzmflx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.451Z","timestamp":1784473458451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovzmflx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:17 GMT\r\netag: W/\"1b-65683a6b05db1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2221,"timings":{"blocked":1896,"dns":0,"connect":0,"send":0,"wait":325,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowesmyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.529Z","timestamp":1784473458529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowesmyq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:46 GMT\r\netag: W/\"1b-65683a86b3ca5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5003,"timings":{"blocked":4383,"dns":0,"connect":0,"send":0,"wait":620,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopohfim/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.565Z","timestamp":1784473458565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopohfim/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:00 GMT\r\netag: W/\"1b-65683a947351f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6830,"timings":{"blocked":6314,"dns":0,"connect":0,"send":0,"wait":516,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoadwhfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.886Z","timestamp":1784473458886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoadwhfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:56:55 GMT\r\netag: W/\"25-656bd53d6843c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoruirln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.905Z","timestamp":1784473458905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoruirln/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 18:30:35 GMT\r\netag: W/\"1b-656bea2c7318d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4769,"timings":{"blocked":4295,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodwknkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.378Z","timestamp":1784473455378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodwknkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 21:06:05 GMT\r\netag: W/\"1b-6551a5c3d9ff1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobsotjq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.164Z","timestamp":1784473456164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobsotjq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 23:34:49 GMT\r\netag: W/\"1b-6556ce781d17d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxatwad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.401Z","timestamp":1784473457401,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxatwad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2487,"timings":{"blocked":1888,"dns":0,"connect":0,"send":0,"wait":599,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowcuolf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.266Z","timestamp":1784473458266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowcuolf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:29 GMT\r\netag: W/\"1b-65683a03ce09a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7050,"timings":{"blocked":6576,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icondtmym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.175Z","timestamp":1784473457175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icondtmym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:24 GMT\r\netag: W/\"1b-655be33f7d304\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodyyaxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.397Z","timestamp":1784473457397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodyyaxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:04:29 GMT\r\netag: W/\"1b-6560fed7c5874\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5821,"timings":{"blocked":5534,"dns":0,"connect":0,"send":0,"wait":287,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolzufuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.578Z","timestamp":1784473457578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolzufuc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 00:14:34 GMT\r\netag: W/\"1b-65636a012dcc1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5936,"timings":{"blocked":5474,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokjuroy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.340Z","timestamp":1784473455340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokjuroy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 08:41:15 GMT\r\netag: W/\"1b-6550ff481c5b8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouchjij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.953Z","timestamp":1784473455953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouchjij/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:44 GMT\r\netag: W/\"1b-6554c6ff45bd0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouenips/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.507Z","timestamp":1784473456507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouenips/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:48 GMT\r\netag: W/\"1b-655a6bd43a544\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoltyncr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.687Z","timestamp":1784473456687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoltyncr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:57 GMT\r\netag: W/\"1b-655a6c158cf84\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobjxscp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.947Z","timestamp":1784473457947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobjxscp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:00 GMT\r\netag: W/\"1b-6567b87e14f5a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3998,"timings":{"blocked":3717,"dns":0,"connect":0,"send":0,"wait":281,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofroubp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.570Z","timestamp":1784473458570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofroubp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:03 GMT\r\netag: W/\"1b-65683a9683a3e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoplutxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.248Z","timestamp":1784473455248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoplutxq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:48:18 GMT\r\netag: W/\"1b-654fe73a2dac4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohmlbtd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.865Z","timestamp":1784473456865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohmlbtd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:05 GMT\r\netag: W/\"1b-655be2baf8754\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6446,"timings":{"blocked":6133,"dns":0,"connect":0,"send":0,"wait":313,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxptipp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.941Z","timestamp":1784473456941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxptipp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:36 GMT\r\netag: W/\"1b-655be2d84664c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5491,"timings":{"blocked":5044,"dns":0,"connect":0,"send":0,"wait":447,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorkviph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.930Z","timestamp":1784473456930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorkviph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:33 GMT\r\netag: W/\"1b-655be2d5e3112\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorhpfrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.094Z","timestamp":1784473457094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorhpfrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:43 GMT\r\netag: W/\"1b-655be318bb558\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4483,"timings":{"blocked":3983,"dns":0,"connect":0,"send":0,"wait":500,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocistpp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.131Z","timestamp":1784473458131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocistpp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:37 GMT\r\netag: W/\"1b-6567b8da1e763\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6936,"timings":{"blocked":6493,"dns":0,"connect":0,"send":0,"wait":443,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopxficf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.163Z","timestamp":1784473458163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopxficf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:51 GMT\r\netag: W/\"1b-6567b8e72b477\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5415,"timings":{"blocked":4842,"dns":0,"connect":0,"send":0,"wait":573,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogicjoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.269Z","timestamp":1784473458269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogicjoe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:31 GMT\r\netag: W/\"1b-65683a05e62b9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoi1c4zk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.802Z","timestamp":1784473458802,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoi1c4zk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icol09t9m/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.883Z","timestamp":1784473458883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icol09t9m/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:28:08 GMT\r\netag: W/\"1b-656bcece12a3a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4768,"timings":{"blocked":4298,"dns":0,"connect":0,"send":0,"wait":470,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolbvfhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.933Z","timestamp":1784473458933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolbvfhm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 06:30:48 GMT\r\netag: W/\"1b-656c8b2877262\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5850,"timings":{"blocked":5396,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojtgpqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.096Z","timestamp":1784473456096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojtgpqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 00:33:50 GMT\r\netag: W/\"1b-655599cb8117e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosnuajv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.902Z","timestamp":1784473456902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosnuajv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:20 GMT\r\netag: W/\"1b-655be2c942a70\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoshnjgs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.519Z","timestamp":1784473458519,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoshnjgs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1992,"timings":{"blocked":1548,"dns":0,"connect":0,"send":0,"wait":444,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoornqsh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.367Z","timestamp":1784473456367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoornqsh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:00 GMT\r\netag: W/\"1b-655a6ba5f7911\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocsnymn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.425Z","timestamp":1784473456425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocsnymn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:18 GMT\r\netag: W/\"1b-655a6bb7b7820\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icongqqve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.286Z","timestamp":1784473457286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icongqqve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 04:40:34 GMT\r\netag: W/\"1b-655e9e0097df7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoroyzke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.028Z","timestamp":1784473458028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoroyzke/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:39 GMT\r\netag: W/\"1b-6567b8a2b4ed7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6987,"timings":{"blocked":6533,"dns":0,"connect":0,"send":0,"wait":454,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaaqrav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.388Z","timestamp":1784473458388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaaqrav/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:40 GMT\r\netag: W/\"1b-65683a4781160\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5228,"timings":{"blocked":4915,"dns":0,"connect":0,"send":0,"wait":313,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icownjgiq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.568Z","timestamp":1784473458568,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icownjgiq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoguukdx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.663Z","timestamp":1784473458663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoguukdx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 02:55:15 GMT\r\netag: W/\"1b-65689561cbe45\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6134,"timings":{"blocked":5541,"dns":0,"connect":0,"send":0,"wait":593,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobmcljb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.725Z","timestamp":1784473456725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobmcljb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:16 GMT\r\netag: W/\"1b-655a6c2844f52\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogysrxc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.124Z","timestamp":1784473457124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogysrxc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:59 GMT\r\netag: W/\"1b-655be328382b6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7230,"timings":{"blocked":6775,"dns":0,"connect":0,"send":0,"wait":455,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xlmeep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.610Z","timestamp":1784473457610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xlmeep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 00:24:54 GMT\r\netag: W/\"1b-6564ae2e53bdf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5440,"timings":{"blocked":57,"dns":0,"connect":0,"send":4686,"wait":697,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopnkzzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.112Z","timestamp":1784473458112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopnkzzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:26 GMT\r\netag: W/\"1b-6567b8cf8786d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogpysyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.016Z","timestamp":1784473456016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogpysyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 13:29:24 GMT\r\netag: W/\"1b-6555054907984\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohxevzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.658Z","timestamp":1784473457658,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohxevzd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3801,"timings":{"blocked":3365,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocfvouu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.992Z","timestamp":1784473457992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocfvouu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:21 GMT\r\netag: W/\"1b-6567b891a1d67\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozbtrdn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.476Z","timestamp":1784473457476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozbtrdn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:40:37 GMT\r\netag: W/\"1b-65618d08456aa\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxnwxlr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.023Z","timestamp":1784473458023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxnwxlr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:36 GMT\r\netag: W/\"1b-6567b89fb9419\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6643,"timings":{"blocked":6199,"dns":0,"connect":0,"send":0,"wait":444,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xyochd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.726Z","timestamp":1784473458726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xyochd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:22:26 GMT\r\netag: W/\"1b-6569cfe9015c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6198,"timings":{"blocked":5713,"dns":0,"connect":0,"send":0,"wait":485,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofaxcbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.321Z","timestamp":1784473456321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofaxcbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 12:33:03 GMT\r\netag: W/\"1b-655a0025eaae1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopzshfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.595Z","timestamp":1784473456595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopzshfa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:21 GMT\r\netag: W/\"1b-655a6bf37a525\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobmkvji/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.090Z","timestamp":1784473457090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobmkvji/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:41 GMT\r\netag: W/\"1b-655be3172515b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5474,"timings":{"blocked":5031,"dns":0,"connect":0,"send":0,"wait":443,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozduwai/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.100Z","timestamp":1784473457100,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozduwai/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3982,"timings":{"blocked":3548,"dns":0,"connect":0,"send":0,"wait":434,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooptkl1/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.431Z","timestamp":1784473457431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooptkl1/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 10:39:44 GMT\r\netag: W/\"1b-656172036cd4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohrkdbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.759Z","timestamp":1784473457759,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohrkdbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3787,"timings":{"blocked":3358,"dns":0,"connect":0,"send":0,"wait":429,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosqtiej/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.301Z","timestamp":1784473458301,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosqtiej/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:52 GMT\r\netag: W/\"1b-65683a19b47b1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xkvona/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.751Z","timestamp":1784473458751,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xkvona/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico6pv4k5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.110Z","timestamp":1784473456110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico6pv4k5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 07:46:42 GMT\r\netag: W/\"1b-6555fa8ccbfab\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":968,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohwwsal/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.440Z","timestamp":1784473456440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohwwsal/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:24 GMT\r\netag: W/\"1b-655a6bbd6a7da\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4407,"timings":{"blocked":366,"dns":0,"connect":0,"send":3756,"wait":285,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoatahuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.488Z","timestamp":1784473457488,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoatahuu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2470,"timings":{"blocked":1957,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohzclpq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.255Z","timestamp":1784473458255,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohzclpq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovcdjth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.292Z","timestamp":1784473458292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovcdjth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:45 GMT\r\netag: W/\"1b-65683a135d6f4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4886,"timings":{"blocked":4491,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico0edqlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.272Z","timestamp":1784473459272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico0edqlm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 10:03:38 GMT\r\netag: W/\"1b-656f3e759fcb0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4111,"timings":{"blocked":3565,"dns":8,"connect":138,"send":0,"wait":157,"receive":-1,"ssl":226},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowmkyvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.443Z","timestamp":1784473455443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowmkyvm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 14:08:24 GMT\r\netag: W/\"1b-65528a451c525\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovbxdpf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.731Z","timestamp":1784473456731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovbxdpf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:19 GMT\r\netag: W/\"1b-655a6c2b61d4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xseweq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.628Z","timestamp":1784473458628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xseweq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 21:03:23 GMT\r\netag: W/\"1b-656846bbdf49a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5669,"timings":{"blocked":5225,"dns":0,"connect":0,"send":0,"wait":444,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovlkzdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.390Z","timestamp":1784473455390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovlkzdz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 22:33:26 GMT\r\netag: W/\"1b-6551b94a4cfdb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorkcdbk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.951Z","timestamp":1784473456951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorkcdbk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:42 GMT\r\netag: W/\"1b-655be2de458be\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6107,"timings":{"blocked":4500,"dns":0,"connect":0,"send":1195,"wait":412,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosyxxla/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.569Z","timestamp":1784473457569,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosyxxla/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoluwowc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.734Z","timestamp":1784473457734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoluwowc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:45 GMT\r\netag: W/\"1b-65664f3b2671c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5421,"timings":{"blocked":4725,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofkjlgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.103Z","timestamp":1784473458103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofkjlgm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:21 GMT\r\netag: W/\"1b-6567b8caa8751\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6738,"timings":{"blocked":6461,"dns":0,"connect":0,"send":0,"wait":277,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooxjbxk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.108Z","timestamp":1784473458108,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooxjbxk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3052,"timings":{"blocked":2485,"dns":0,"connect":0,"send":0,"wait":567,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xjkbyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.734Z","timestamp":1784473458734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xjkbyg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 02:27:46 GMT\r\netag: W/\"1b-6569d11ab1324\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4759,"timings":{"blocked":4220,"dns":0,"connect":0,"send":0,"wait":539,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoreaqlf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.026Z","timestamp":1784473456026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoreaqlf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 17:13:51 GMT\r\netag: W/\"1b-65553773d65d8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotxnvjm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.266Z","timestamp":1784473456266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotxnvjm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 00:24:54 GMT\r\netag: W/\"1b-65595d6500627\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogxfwrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.278Z","timestamp":1784473457278,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogxfwrx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodxlljd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.505Z","timestamp":1784473458505,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodxlljd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoumtpsq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.171Z","timestamp":1784473455171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoumtpsq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 22 Jun 2026 12:00:56 GMT\r\netag: W/\"1b-654d6651e6d04\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvhyem/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.827Z","timestamp":1784473455827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvhyem/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:46:58 GMT\r\netag: W/\"1b-6553ef9424084\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconpiamz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.166Z","timestamp":1784473456166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconpiamz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 30 Jun 2026 00:19:53 GMT\r\netag: W/\"1b-6556d88ac88cf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconbswdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.460Z","timestamp":1784473457460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconbswdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:30:47 GMT\r\netag: W/\"1b-65618ad5aff6f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":6800,"wait":443,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoopeaxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.581Z","timestamp":1784473457581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoopeaxo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 01:05:16 GMT\r\netag: W/\"1b-65637556c6fb5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofcssgi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.791Z","timestamp":1784473458791,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofcssgi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorlqdwx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.547Z","timestamp":1784473455547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorlqdwx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 21:13:41 GMT\r\netag: W/\"1b-6552e954aaaff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosuns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.898Z","timestamp":1784473455898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosuns/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 03:38:22 GMT\r\netag: \"0-6554812dec1ee\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":303,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowibohr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.442Z","timestamp":1784473456442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowibohr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:25 GMT\r\netag: W/\"1b-655a6bbdee53a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocrwxmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.887Z","timestamp":1784473457887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocrwxmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:23 GMT\r\netag: W/\"1b-6567b85a29a7e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolabycr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.041Z","timestamp":1784473458041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolabycr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:43 GMT\r\netag: W/\"1b-6567b8a716ff2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5769,"timings":{"blocked":5378,"dns":0,"connect":0,"send":0,"wait":391,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xwmmgf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.707Z","timestamp":1784473458707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xwmmgf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 18:36:22 GMT\r\netag: W/\"1b-656967bd3169a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5770,"timings":{"blocked":5426,"dns":0,"connect":0,"send":0,"wait":344,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooxxhyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.118Z","timestamp":1784473459118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooxxhyz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 15:48:22 GMT\r\netag: W/\"1b-656e49a5f3624\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"da3a31f1e9f479606469aff416ab917f","sha1":"4b18dcab9c47547b1d8daa4aa5771c0949303ec7","sha256":"c125bc6783e4f1add7fd69b16ea124ef6bb145b4281d89df17325898ba8fd761","sha512":"407a435483e85b6bc7f80b2cf132d642e62d65837ceb305bcd4e43e5915b30d2990ae66cc3b4b0b059ed3ae6cf1007653b035792e16164f33ff402956677243b","ssdeep":"","tlshash":"b48000a08a2a00c083a0c003a3002a280802b02880200822e02e000c0cc22000a80aae","first_seen":"2026-07-05T03:53:26.747277Z","last_seen":"2026-07-21T15:25:14.068585Z","times_seen":28,"resource_available":false,"data":null}},"time_used":5872,"timings":{"blocked":5421,"dns":0,"connect":0,"send":0,"wait":451,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaozqmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.261Z","timestamp":1784473455261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaozqmd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 12:56:21 GMT\r\netag: W/\"1b-654ff66f89431\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosdaupw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.033Z","timestamp":1784473456033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosdaupw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 20:46:35 GMT\r\netag: W/\"1b-65556700682af\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico4lggho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.216Z","timestamp":1784473456216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico4lggho/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 01:46:30 GMT\r\netag: W/\"1b-65582dc4fbf9e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":891,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomchdta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.232Z","timestamp":1784473456232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomchdta/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 11:20:46 GMT\r\netag: W/\"1b-6558ae2075b92\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoo146pa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.252Z","timestamp":1784473456252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoo146pa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 16:54:30 GMT\r\netag: W/\"1b-6558f8b89bb51\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohkxjpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.828Z","timestamp":1784473456828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohkxjpu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:55 GMT\r\netag: W/\"1b-655bb63644ae9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooypyoq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.050Z","timestamp":1784473458050,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooypyoq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icooffiow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.057Z","timestamp":1784473458057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icooffiow/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:54 GMT\r\netag: W/\"1b-6567b8b14a529\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5486,"timings":{"blocked":4817,"dns":0,"connect":0,"send":0,"wait":669,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico005xw7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.901Z","timestamp":1784473455901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico005xw7/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:29:23 GMT\r\netag: W/\"1b-655499fe28d76\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyixbuk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.319Z","timestamp":1784473456319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyixbuk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 12:33:03 GMT\r\netag: W/\"1b-655a0025d8201\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozkuqpm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.365Z","timestamp":1784473456365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozkuqpm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:33:59 GMT\r\netag: W/\"1b-655a6ba572c12\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxxpcbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.755Z","timestamp":1784473456755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxxpcbv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 02:49:30 GMT\r\netag: W/\"1b-655abf943cf2e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoexuvjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.324Z","timestamp":1784473457324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoexuvjh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 21:29:10 GMT\r\netag: W/\"1b-655f7f7134f18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobfqoxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.435Z","timestamp":1784473457435,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobfqoxf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 12:14:01 GMT\r\netag: W/\"1b-65618715bb200\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconezbyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.645Z","timestamp":1784473457645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconezbyr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 18:55:50 GMT\r\netag: W/\"1b-6565a67e30b69\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7053,"timings":{"blocked":6598,"dns":0,"connect":0,"send":0,"wait":455,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodaztvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.049Z","timestamp":1784473459049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodaztvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 01:43:51 GMT\r\netag: W/\"1b-656d8ce1ebf3d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3423,"timings":{"blocked":2853,"dns":0,"connect":0,"send":0,"wait":570,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeqalht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.580Z","timestamp":1784473455580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeqalht/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 22:07:28 GMT\r\netag: W/\"1b-6552f55a4837f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoktfhau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.057Z","timestamp":1784473456057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoktfhau/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:22:55 GMT\r\netag: W/\"1b-65557c88cc44a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":986,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobtextv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.511Z","timestamp":1784473456511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobtextv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:50 GMT\r\netag: W/\"1b-655a6bd5c8c42\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icootvmrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.737Z","timestamp":1784473456737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icootvmrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:22 GMT\r\netag: W/\"1b-655a6c2df502c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodbzmcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.012Z","timestamp":1784473457012,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodbzmcw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobfpxhr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.154Z","timestamp":1784473457154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobfpxhr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:13 GMT\r\netag: W/\"1b-655be3354bd1a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconmuqof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.171Z","timestamp":1784473457171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconmuqof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:22 GMT\r\netag: W/\"1b-655be33d56689\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodotegz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.799Z","timestamp":1784473457799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodotegz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:08 GMT\r\netag: W/\"1b-6567956de8868\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoikmpwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.225Z","timestamp":1784473457225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoikmpwz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 02:12:01 GMT\r\netag: W/\"1b-655d3aeeffd29\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaumels/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.341Z","timestamp":1784473457341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaumels/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:54 GMT\r\netag: W/\"1b-655faa85297b2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovkejka/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.958Z","timestamp":1784473458958,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovkejka/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqcwdzh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.281Z","timestamp":1784473459281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqcwdzh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 11:44:33 GMT\r\netag: W/\"1b-656f550390250\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5214,"timings":{"blocked":4782,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconzkuep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.258Z","timestamp":1784473456258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconzkuep/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 17:04:55 GMT\r\netag: W/\"1b-6558fb0ce6ec7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobnqbpn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.996Z","timestamp":1784473456996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobnqbpn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:05 GMT\r\netag: W/\"1b-655be2f3f932b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_junyhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.606Z","timestamp":1784473457606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_junyhd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 23:02:40 GMT\r\netag: W/\"1e-65649bccc1b4a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6582,"timings":{"blocked":52,"dns":0,"connect":0,"send":5957,"wait":573,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeiujxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.098Z","timestamp":1784473458098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeiujxu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:18 GMT\r\netag: W/\"1b-6567b8c7a7e74\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6002,"timings":{"blocked":5570,"dns":0,"connect":0,"send":0,"wait":432,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopxpoev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.373Z","timestamp":1784473458373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopxpoev/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:33 GMT\r\netag: W/\"1b-65683a4138b02\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6446,"timings":{"blocked":6120,"dns":0,"connect":0,"send":0,"wait":326,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyhgbmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.794Z","timestamp":1784473458794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyhgbmm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 11:15:48 GMT\r\netag: W/\"1b-656a47210d4dc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4506,"timings":{"blocked":4195,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobvtbrj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.069Z","timestamp":1784473459069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobvtbrj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 06:13:23 GMT\r\netag: W/\"1b-656dc9213d829\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6512,"timings":{"blocked":6050,"dns":0,"connect":0,"send":0,"wait":462,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico1n7bfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.412Z","timestamp":1784473455412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico1n7bfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 05:54:25 GMT\r\netag: W/\"1b-65521bdb8677e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoolpyfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.237Z","timestamp":1784473456237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoolpyfy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 13:43:57 GMT\r\netag: W/\"1b-6558ce2196000\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoynlrzo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.418Z","timestamp":1784473457418,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoynlrzo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_vsbfmi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.603Z","timestamp":1784473457603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_vsbfmi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 23:02:38 GMT\r\netag: W/\"1e-65649bcaa0c8b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3875,"timings":{"blocked":46,"dns":0,"connect":0,"send":3452,"wait":377,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorlkcxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.219Z","timestamp":1784473458219,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorlkcxx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyloqgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.243Z","timestamp":1784473458243,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyloqgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:16 GMT\r\netag: W/\"1b-656839f7af7fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoanjcnn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.064Z","timestamp":1784473457064,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoanjcnn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico2neav5a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.234Z","timestamp":1784473457234,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico2neav5a/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3980,"timings":{"blocked":3644,"dns":0,"connect":0,"send":0,"wait":336,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogaildm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.419Z","timestamp":1784473457419,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogaildm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokdodbh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.045Z","timestamp":1784473458045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokdodbh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:46 GMT\r\netag: W/\"1b-6567b8a9dcf50\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4269,"timings":{"blocked":3791,"dns":0,"connect":0,"send":0,"wait":478,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozyvqhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.121Z","timestamp":1784473458121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozyvqhp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:32 GMT\r\netag: W/\"1b-6567b8d520247\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6450,"timings":{"blocked":5873,"dns":0,"connect":0,"send":0,"wait":577,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozbfusq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.164Z","timestamp":1784473458164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozbfusq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:51 GMT\r\netag: W/\"1b-6567b8e7c39f7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2974,"timings":{"blocked":2571,"dns":0,"connect":0,"send":0,"wait":403,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoa8hzq5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.066Z","timestamp":1784473459066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoa8hzq5/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 03:56:59 GMT\r\netag: W/\"1b-656daaa3bb953\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouphneh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.075Z","timestamp":1784473459075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouphneh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 09:45:38 GMT\r\netag: W/\"1b-656df8925b207\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4500,"timings":{"blocked":4064,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovhqqua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.452Z","timestamp":1784473456452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovhqqua/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:26 GMT\r\netag: W/\"1b-655a6bbf7bc98\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico0u2ura/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.709Z","timestamp":1784473457709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico0u2ura/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 00:51:11 GMT\r\netag: W/\"1b-6565f5eb9f282\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4334,"timings":{"blocked":3842,"dns":0,"connect":0,"send":0,"wait":492,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozzxzub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.033Z","timestamp":1784473458033,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozzxzub/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:42 GMT\r\netag: W/\"1b-6567b8a5b0994\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomqyvaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.285Z","timestamp":1784473455285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomqyvaj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 21:26:28 GMT\r\netag: W/\"1b-6550687484e39\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxmftu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.773Z","timestamp":1784473455773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxmftu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 06:56:42 GMT\r\netag: W/\"1b-65536ba491707\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouckroh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.580Z","timestamp":1784473456580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouckroh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:15 GMT\r\netag: W/\"1b-655a6bee4168a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoilwetw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.683Z","timestamp":1784473456683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoilwetw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:54 GMT\r\netag: W/\"1b-655a6c13672a6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqjmljy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.272Z","timestamp":1784473458272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqjmljy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:33 GMT\r\netag: W/\"1b-65683a080fe18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2921,"timings":{"blocked":2372,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_kebgce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.981Z","timestamp":1784473458981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_kebgce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 14:11:17 GMT\r\netag: W/\"1e-656cf2156f52e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30,"size_decoded":322,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a2bf0bad4bd4092234ac59c1b1f68c19","sha1":"797dff6d398ffdf5c10c1fe6d68bf5654d1c23b0","sha256":"2d9dc2f30ab99221c79db13968a40d35bf04ba34260de95288290260d5c8527b","sha512":"955840ca84c3f37c5c4072f411b57e4fc8aed39375d00719c7462311a3102cd66c81540c646fa2e4d4e0bdb199e089718dae944f95fea8589330e326ee48f63f","ssdeep":"","tlshash":"0b8000b0a88800c003a0c00383002aab2002b02880300a22f82e000c8cc22208b80a3c","first_seen":"2026-07-05T03:53:26.689189Z","last_seen":"2026-07-21T15:25:14.076563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":4084,"timings":{"blocked":3503,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojkhbql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.891Z","timestamp":1784473457891,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojkhbql/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3750,"timings":{"blocked":3314,"dns":0,"connect":0,"send":0,"wait":436,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xmoyym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.784Z","timestamp":1784473458784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xmoyym/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 08:10:55 GMT\r\netag: W/\"1b-656a1dcde88f8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6730,"timings":{"blocked":6256,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobxymly/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.946Z","timestamp":1784473458946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobxymly/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:52 GMT\r\netag: W/\"1b-656c95742bd42\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoacrcve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.045Z","timestamp":1784473459045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoacrcve/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 00:31:15 GMT\r\netag: W/\"1b-656d7ca7fe1d2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovebpbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.980Z","timestamp":1784473455980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovebpbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:53 GMT\r\netag: W/\"1b-6554c7081692a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":947,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoywmtgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.114Z","timestamp":1784473456114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoywmtgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 08:13:28 GMT\r\netag: W/\"1b-65560088c6f8f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":980,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiazwof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.590Z","timestamp":1784473456590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiazwof/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:19 GMT\r\netag: W/\"1b-655a6bf1651e7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozwbooq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.317Z","timestamp":1784473457317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozwbooq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 20:57:09 GMT\r\netag: W/\"1b-655f7848a56f7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojai58p/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.590Z","timestamp":1784473457590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojai58p/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 11:31:58 GMT\r\netag: W/\"1b-6564016abd7c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":3658,"wait":382,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotzsxqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.858Z","timestamp":1784473457858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotzsxqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:08 GMT\r\netag: W/\"1b-6567b84bc804d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5381,"timings":{"blocked":4685,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoybwara/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.413Z","timestamp":1784473456413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoybwara/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:13 GMT\r\netag: W/\"1b-655a6bb3101a4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolhuxbc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.717Z","timestamp":1784473456717,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolhuxbc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohnassc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.119Z","timestamp":1784473457119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohnassc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:56 GMT\r\netag: W/\"1b-655be3253c7fc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolywkea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.304Z","timestamp":1784473458304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolywkea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:54 GMT\r\netag: W/\"1b-65683a1b96e71\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6756,"timings":{"blocked":6345,"dns":0,"connect":0,"send":0,"wait":411,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xbxjkp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.756Z","timestamp":1784473458756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xbxjkp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 15 Jul 2026 07:23:23 GMT\r\netag: W/\"1b-656a132e32dae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2029,"timings":{"blocked":1724,"dns":0,"connect":0,"send":0,"wait":305,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotrhrrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.939Z","timestamp":1784473458939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotrhrrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:50 GMT\r\netag: W/\"1b-656c9572050c3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4745,"timings":{"blocked":4124,"dns":0,"connect":0,"send":0,"wait":621,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorelhye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.393Z","timestamp":1784473456393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorelhye/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:09 GMT\r\netag: W/\"1b-655a6baecb549\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoynecbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.632Z","timestamp":1784473456632,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoynecbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorbfbyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.826Z","timestamp":1784473456826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorbfbyn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:53 GMT\r\netag: W/\"1b-655bb635391a8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaltbfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.082Z","timestamp":1784473457082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaltbfn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:39 GMT\r\netag: W/\"1b-655be314fd540\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6095,"timings":{"blocked":5631,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaciyvj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.910Z","timestamp":1784473457910,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaciyvj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:37 GMT\r\netag: W/\"1b-6567b86830790\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohzwmrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.010Z","timestamp":1784473456010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohzwmrb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 11:06:15 GMT\r\netag: W/\"1b-6554e549e2f77\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":925,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconidimi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.295Z","timestamp":1784473456295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconidimi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:08 GMT\r\netag: W/\"1b-6559adea2b057\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokuixea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.860Z","timestamp":1784473457860,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokuixea/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3123,"timings":{"blocked":2553,"dns":0,"connect":0,"send":0,"wait":570,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xgfkli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.220Z","timestamp":1784473459220,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xgfkli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolmpzyd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.393Z","timestamp":1784473455393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolmpzyd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 00:06:51 GMT\r\netag: W/\"1b-6551ce2b9f6ba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqmzgzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.054Z","timestamp":1784473456054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqmzgzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:22:37 GMT\r\netag: W/\"1b-65557c7788593\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1032,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotypwrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.291Z","timestamp":1784473456291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotypwrw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:08 GMT\r\netag: W/\"1b-6559ade9a53b8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozrdlzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.024Z","timestamp":1784473457024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozrdlzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:19 GMT\r\netag: W/\"1b-655be301d122b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5617,"timings":{"blocked":5072,"dns":0,"connect":0,"send":0,"wait":545,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoebckbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.122Z","timestamp":1784473457122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoebckbz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:58 GMT\r\netag: W/\"1b-655be32708758\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5609,"timings":{"blocked":5065,"dns":0,"connect":0,"send":0,"wait":544,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xmhrre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.209Z","timestamp":1784473459209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xmhrre/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 03:34:31 GMT\r\netag: W/\"1b-656ee77b854eb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6516,"timings":{"blocked":5995,"dns":0,"connect":0,"send":0,"wait":521,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovewrcs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.661Z","timestamp":1784473456661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovewrcs/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:45 GMT\r\netag: W/\"1b-655a6c0a732cf\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoq1cf0n/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.481Z","timestamp":1784473457481,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoq1cf0n/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosgfiqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.752Z","timestamp":1784473457752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosgfiqk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:50:58 GMT\r\netag: W/\"1b-6566d9dbf45c2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5550,"timings":{"blocked":5030,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoq5js50/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.781Z","timestamp":1784473457781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoq5js50/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 03:12:29 GMT\r\netag: W/\"1b-6567575e37ee6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7242,"timings":{"blocked":6761,"dns":0,"connect":0,"send":0,"wait":481,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoufyunl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.015Z","timestamp":1784473458015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoufyunl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:31 GMT\r\netag: W/\"1b-6567b89b94b5d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6646,"timings":{"blocked":6201,"dns":0,"connect":0,"send":0,"wait":445,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxcoghd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.059Z","timestamp":1784473458059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxcoghd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:55 GMT\r\netag: W/\"1b-6567b8b280de8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3068,"timings":{"blocked":2519,"dns":0,"connect":0,"send":0,"wait":549,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxgueae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.417Z","timestamp":1784473458417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxgueae/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:57 GMT\r\netag: W/\"1b-65683a57f2119\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4159,"timings":{"blocked":3603,"dns":0,"connect":0,"send":0,"wait":556,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotogvmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.388Z","timestamp":1784473456388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotogvmz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:07 GMT\r\netag: W/\"1b-655a6bacb620b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoonkoaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.342Z","timestamp":1784473457342,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoonkoaq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:54 GMT\r\netag: W/\"1b-655faa8535332\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icod1jzkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.744Z","timestamp":1784473457744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icod1jzkn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 12:28:31 GMT\r\netag: W/\"1b-656691c9c2121\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6022,"timings":{"blocked":5657,"dns":0,"connect":0,"send":0,"wait":365,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconkmsxd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.406Z","timestamp":1784473458406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconkmsxd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:51 GMT\r\netag: W/\"1b-65683a521323b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojcrzth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.401Z","timestamp":1784473455401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojcrzth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 04:19:19 GMT\r\netag: W/\"1b-6552069961095\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohtvwvr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.752Z","timestamp":1784473455752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohtvwvr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 04:55:13 GMT\r\netag: W/\"1b-6553507d28cde\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xygoaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.794Z","timestamp":1784473457794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xygoaa/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 06:56:08 GMT\r\netag: W/\"1b-6567895b89533\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":414,"dns":0,"connect":0,"send":0,"wait":366,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/system/js/core.min.js?e20992","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.304Z","timestamp":1784473459304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/system/js/core.min.js?e20992 HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3242\r\nx-content-type-options: nosniff\r\nvary: Accept-encoding\r\nlast-modified: Fri, 04 Oct 2024 01:14:40 GMT\r\netag: \"caa-6239c653674b1\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":7888,"size_decoded":3581,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6734)","md5":"e20992529fb2ef9afb8bc0a6f96782a8","sha1":"8a6cb1f95bed06381a3342a7cf959509a7071fe6","sha256":"d03b0386b775f28c5f64d70cfa39b695189808d36815315bee3d5773b7d82639","sha512":"3409a3a62519523286e71109abc4c7990b45a75f84fd58859e11fc1b38717c194bbac47e682afeef95a609421f042c2768b62b736c8c4b097523e55c0821b3a2","ssdeep":"192:rCGwKO1HrvAD4qUBZWdHmrQG+mDyVRznG4Wf9QC9DGmwW52FP9yZ8ZaZs:bwx1HjAD46BmrB+mDiRznG4Wf9QCFHo9","tlshash":"a3f1d7e72865927186e8d3ee90915718b437a310b83f8410a458bdfa7f85d02e97f9b4","first_seen":"2024-08-22T01:46:48Z","last_seen":"2026-07-21T12:38:10.577836Z","times_seen":106,"resource_available":true,"data":null}},"time_used":5761,"timings":{"blocked":5344,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icok4a8dl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.906Z","timestamp":1784473455906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icok4a8dl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:29:30 GMT\r\netag: W/\"1b-65549a04a6f30\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1687,"timings":{"blocked":1254,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozynawb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.698Z","timestamp":1784473456698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozynawb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:02 GMT\r\netag: W/\"1b-655a6c1abe11f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoftvvad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.064Z","timestamp":1784473458064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoftvvad/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:59 GMT\r\netag: W/\"1b-6567b8b5bb0a5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofvlzmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.235Z","timestamp":1784473458235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofvlzmp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:07 GMT\r\netag: W/\"1b-656839eea21e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4836,"timings":{"blocked":4543,"dns":0,"connect":0,"send":0,"wait":293,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqawnzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.490Z","timestamp":1784473456490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqawnzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:40 GMT\r\netag: W/\"1b-655a6bccfcd0b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovybgoq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.303Z","timestamp":1784473457303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovybgoq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 07:44:41 GMT\r\netag: W/\"1b-655ec727ad6e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocarwjj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.838Z","timestamp":1784473457838,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocarwjj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowkgfde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.980Z","timestamp":1784473457980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowkgfde/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:14 GMT\r\netag: W/\"1b-6567b88af7c8d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4282,"timings":{"blocked":3818,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocrtwgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.982Z","timestamp":1784473458982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocrtwgq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 14:15:27 GMT\r\netag: W/\"1b-656cf3034ce1e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofont/icofont.min.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.168Z","timestamp":1784473455168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofont/icofont.min.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 150\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 02:40:49 GMT\r\netag: \"be-655abda3698b5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190,"size_decoded":508,"mime_type":"text/css","magic":"ASCII text","md5":"36be078beb026a96031c2ee692103cc6","sha1":"60aef5205246503c43b487483e8edf1577ad7f36","sha256":"a5b19a10aee5cb726f508dc8e7a0a06ff60d8768828ab1ede011d02bf26a0d49","sha512":"5e71a80785d7dcf2587d4ecf71345f63b31756e5b2324a26e8b82009dffe60d3fe851211f587fb53a107ae3f26b410e0b00a8f29da6611dfe7bfdc372d1c2311","ssdeep":"","tlshash":"60c01283db592058b3628c02b3a1f5157817bc03c5550e95f55d49484ef3d501360fb4","first_seen":"2026-07-05T03:53:26.734131Z","last_seen":"2026-07-21T15:04:43.615773Z","times_seen":5,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoe6g3fk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.913Z","timestamp":1784473455913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoe6g3fk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 05:32:58 GMT\r\netag: W/\"1b-65549acae5e17\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomihgfj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.298Z","timestamp":1784473456298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomihgfj/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 06:25:09 GMT\r\netag: W/\"1b-6559adeab1c96\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":336,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodoqhzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.409Z","timestamp":1784473457409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodoqhzt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 02:10:01 GMT\r\netag: W/\"1b-65610014f3c0e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowspyay/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.907Z","timestamp":1784473457907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowspyay/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:36 GMT\r\netag: W/\"1b-6567b86664832\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5375,"timings":{"blocked":4225,"dns":0,"connect":0,"send":454,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowuxvpb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.088Z","timestamp":1784473458088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowuxvpb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:12 GMT\r\netag: W/\"1b-6567b8c2c6e18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4340,"timings":{"blocked":3804,"dns":0,"connect":0,"send":0,"wait":536,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovgqeac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.350Z","timestamp":1784473458350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovgqeac/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:20 GMT\r\netag: W/\"1b-65683a34686a7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5090,"timings":{"blocked":4469,"dns":0,"connect":0,"send":0,"wait":621,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icognbzbi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.976Z","timestamp":1784473458976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icognbzbi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 11:56:33 GMT\r\netag: W/\"1b-656cd3f773a62\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5213,"timings":{"blocked":4822,"dns":0,"connect":0,"send":0,"wait":391,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoufxaqu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.423Z","timestamp":1784473455423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoufxaqu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 07:46:40 GMT\r\netag: W/\"1b-655234f29d2ec\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoixohbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.792Z","timestamp":1784473455792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoixohbu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 11:15:30 GMT\r\netag: W/\"1b-6553a57d32c3e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxcyjhi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.288Z","timestamp":1784473458288,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxcyjhi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowvnetn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.228Z","timestamp":1784473455228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowvnetn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 23 Jun 2026 17:52:52 GMT\r\netag: W/\"1b-654ef6d91e12e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosofzhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.541Z","timestamp":1784473455541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosofzhg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 20:51:55 GMT\r\netag: W/\"1b-6552e476f80d9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxralsn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.833Z","timestamp":1784473455833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxralsn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 16:47:02 GMT\r\netag: W/\"1b-6553ef97ead40\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoasv9fx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.018Z","timestamp":1784473456018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoasv9fx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 13:43:08 GMT\r\netag: W/\"1b-6555085ab0618\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojipxms/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.756Z","timestamp":1784473457756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojipxms/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:51:00 GMT\r\netag: W/\"1b-6566d9ddf02c0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5417,"timings":{"blocked":4837,"dns":0,"connect":0,"send":0,"wait":580,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconoxjph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.896Z","timestamp":1784473457896,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconoxjph/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:29 GMT\r\netag: W/\"1b-6567b85ff8f58\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconuchhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.024Z","timestamp":1784473458024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconuchhh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:36 GMT\r\netag: W/\"1b-6567b8a054879\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":484,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoucawgu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.138Z","timestamp":1784473458138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoucawgu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:41 GMT\r\netag: W/\"1b-6567b8de652ff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6468,"timings":{"blocked":5967,"dns":0,"connect":0,"send":0,"wait":501,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaejxie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.393Z","timestamp":1784473457393,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaejxie/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2491,"timings":{"blocked":1884,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxjdfa4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.597Z","timestamp":1784473457597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxjdfa4/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 17:50:55 GMT\r\netag: W/\"1b-6564561ecbb4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7284,"timings":{"blocked":6810,"dns":0,"connect":0,"send":0,"wait":474,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icophezdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.187Z","timestamp":1784473458187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icophezdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:29:00 GMT\r\netag: W/\"1b-6567b8efa820f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6401,"timings":{"blocked":5755,"dns":0,"connect":0,"send":0,"wait":646,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofbgbhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.438Z","timestamp":1784473458438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofbgbhz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:08 GMT\r\netag: W/\"1b-65683a62c3994\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5644,"timings":{"blocked":5284,"dns":0,"connect":0,"send":0,"wait":360,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoonglcm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.482Z","timestamp":1784473458482,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoonglcm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:27 GMT\r\netag: W/\"1b-65683a7446fed\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosvvrna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.009Z","timestamp":1784473457009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosvvrna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:12 GMT\r\netag: W/\"1b-655be2fae4adb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobgnhgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.564Z","timestamp":1784473457564,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobgnhgo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 17:14:11 GMT\r\netag: W/\"1b-65630c0ac7bba\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowovgkq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.179Z","timestamp":1784473458179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowovgkq/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:56 GMT\r\netag: W/\"1b-6567b8ebfcad3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4182,"timings":{"blocked":3657,"dns":0,"connect":0,"send":0,"wait":525,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xhicwp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.711Z","timestamp":1784473458711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xhicwp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 14 Jul 2026 18:49:22 GMT\r\netag: W/\"1b-65696aa4518c6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4552,"timings":{"blocked":4241,"dns":0,"connect":0,"send":0,"wait":311,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofejwgh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.916Z","timestamp":1784473458916,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofejwgh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":1026,"dns":0,"connect":0,"send":0,"wait":679,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icognnfio/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.823Z","timestamp":1784473456823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icognnfio/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:51 GMT\r\netag: W/\"1b-655bb63300be7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoefcveg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.833Z","timestamp":1784473456833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoefcveg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:48 GMT\r\netag: W/\"1b-655be2aa8875d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":329,"dns":49,"connect":143,"send":0,"wait":163,"receive":-1,"ssl":147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoquiggb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.730Z","timestamp":1784473457730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoquiggb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:44 GMT\r\netag: W/\"1b-65664f3a8c25c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6605,"timings":{"blocked":6126,"dns":0,"connect":0,"send":0,"wait":479,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozczzvf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.336Z","timestamp":1784473455336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozczzvf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 08:41:13 GMT\r\netag: W/\"1b-6550ff46b9dd8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoj0o9cz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.499Z","timestamp":1784473457499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoj0o9cz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 21:02:39 GMT\r\netag: W/\"1b-6561fd3eb81ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7162,"timings":{"blocked":6754,"dns":0,"connect":0,"send":0,"wait":408,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokzclth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.110Z","timestamp":1784473458110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokzclth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:25 GMT\r\netag: W/\"1b-6567b8ce4736e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4169,"timings":{"blocked":3668,"dns":0,"connect":0,"send":0,"wait":501,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogtmtrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.848Z","timestamp":1784473456848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogtmtrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:31:57 GMT\r\netag: W/\"1b-655be2b38a1e6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5790,"timings":{"blocked":5270,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xemyfo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.410Z","timestamp":1784473457410,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xemyfo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofwcvtx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.186Z","timestamp":1784473458186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofwcvtx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:59 GMT\r\netag: W/\"1b-6567b8ef06ff0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":477,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomffmth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.621Z","timestamp":1784473458621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomffmth/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:09:20 GMT\r\netag: W/\"1b-65683aa75e177\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5673,"timings":{"blocked":5240,"dns":0,"connect":0,"send":0,"wait":433,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxjutfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.971Z","timestamp":1784473455971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxjutfk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:47 GMT\r\netag: W/\"1b-6554c701f53ce\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoslavgd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.587Z","timestamp":1784473457587,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoslavgd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 09:21:33 GMT\r\netag: W/\"1b-6563e4449c09c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icollckvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.256Z","timestamp":1784473458256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icollckvu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:06:21 GMT\r\netag: W/\"1b-656839fc7627c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico7v8j3d/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.695Z","timestamp":1784473458695,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico7v8j3d/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/shxt_oeccyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.102Z","timestamp":1784473459102,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/shxt_oeccyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohlnekc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.382Z","timestamp":1784473456382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohlnekc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:04 GMT\r\netag: W/\"1b-655a6baa9d04d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogsaxbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.145Z","timestamp":1784473457145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogsaxbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:10 GMT\r\netag: W/\"1b-655be33214941\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogvdcru/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.854Z","timestamp":1784473457854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogvdcru/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:05 GMT\r\netag: W/\"1b-6567b849acf4f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6662,"timings":{"blocked":6391,"dns":0,"connect":0,"send":0,"wait":271,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoikthxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.961Z","timestamp":1784473458961,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoikthxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoddrgnw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.234Z","timestamp":1784473455234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoddrgnw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 00:03:24 GMT\r\netag: W/\"1b-654f49ab97442\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoovnwii/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.701Z","timestamp":1784473456701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoovnwii/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:04 GMT\r\netag: W/\"1b-655a6c1c4f6fd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobkgtvp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.511Z","timestamp":1784473457511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobkgtvp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 08 Jul 2026 22:26:48 GMT\r\netag: W/\"1b-6562100de0363\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4758,"timings":{"blocked":4177,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqumtbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.384Z","timestamp":1784473458384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqumtbe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:38 GMT\r\netag: W/\"1b-65683a45a86e0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3609,"timings":{"blocked":3217,"dns":0,"connect":0,"send":0,"wait":392,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoccawrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.399Z","timestamp":1784473455399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoccawrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 26 Jun 2026 03:36:00 GMT\r\netag: W/\"1b-6551fceb6ea8e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopypdcu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.984Z","timestamp":1784473455984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopypdcu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:57 GMT\r\netag: W/\"1b-6554c70bb16c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":965,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojxpbtd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.529Z","timestamp":1784473456529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojxpbtd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:59 GMT\r\netag: W/\"1b-655a6bde5e07a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoaukpce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.809Z","timestamp":1784473457809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoaukpce/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:12 GMT\r\netag: W/\"1b-6567957113126\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5636,"timings":{"blocked":5274,"dns":0,"connect":0,"send":0,"wait":362,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoavgnoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.442Z","timestamp":1784473458442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoavgnoh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:08:11 GMT\r\netag: W/\"1b-65683a6559b53\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6909,"timings":{"blocked":6390,"dns":0,"connect":0,"send":0,"wait":519,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogrdpli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.027Z","timestamp":1784473459027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogrdpli/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:42 GMT\r\netag: W/\"1b-656d67130d414\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5465,"timings":{"blocked":5005,"dns":0,"connect":0,"send":0,"wait":460,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolwmntt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.204Z","timestamp":1784473459204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolwmntt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 03:09:57 GMT\r\netag: W/\"1b-656ee1fdf103e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogopvbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.203Z","timestamp":1784473457203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogopvbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 03:57:37 GMT\r\netag: W/\"1b-655c10ac3d9b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokxxmix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.239Z","timestamp":1784473457239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokxxmix/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 05 Jul 2026 15:21:30 GMT\r\netag: W/\"1b-655deb65c3d03\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozchein/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.357Z","timestamp":1784473457357,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozchein/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 00:41:56 GMT\r\netag: W/\"1b-655faa8761d6b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovprggx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.376Z","timestamp":1784473457376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovprggx/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 07 Jul 2026 20:48:10 GMT\r\netag: W/\"1b-6560b824300b9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ejstlout/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.813Z","timestamp":1784473457813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ejstlout/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:01:40 GMT\r\netag: W/\"1b-65679801c634f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":412,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoblvqoi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.919Z","timestamp":1784473457919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoblvqoi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:43 GMT\r\netag: W/\"1b-6567b86dc04ca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3826,"timings":{"blocked":3433,"dns":0,"connect":0,"send":0,"wait":393,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxyawdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.006Z","timestamp":1784473459006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxyawdt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:40 GMT\r\netag: W/\"1b-656d512a06313\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4799,"timings":{"blocked":4218,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovrkyee/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.028Z","timestamp":1784473459028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovrkyee/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 22:54:42 GMT\r\netag: W/\"1b-656d67138a413\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3452,"timings":{"blocked":3140,"dns":0,"connect":0,"send":0,"wait":312,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojqsqyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.244Z","timestamp":1784473455244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojqsqyh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 24 Jun 2026 11:48:17 GMT\r\netag: W/\"1b-654fe7394f044\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorpvngr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.966Z","timestamp":1784473455966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorpvngr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:47 GMT\r\netag: W/\"1b-6554c701e0bae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomxzbgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.937Z","timestamp":1784473457937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomxzbgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:26:54 GMT\r\netag: W/\"1b-6567b877b1380\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoyvskwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.575Z","timestamp":1784473458575,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoyvskwd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1895,"timings":{"blocked":1372,"dns":0,"connect":0,"send":0,"wait":523,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxctlig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.010Z","timestamp":1784473459010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxctlig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 21:16:41 GMT\r\netag: W/\"1b-656d512a861f6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqhmavi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.082Z","timestamp":1784473456082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqhmavi/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 23:35:09 GMT\r\netag: W/\"1b-65558cadfa851\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovfwrbh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.527Z","timestamp":1784473457527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovfwrbh/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 02:54:28 GMT\r\netag: W/\"1b-65624be152414\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5614,"timings":{"blocked":5094,"dns":0,"connect":0,"send":0,"wait":520,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomzvajl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.828Z","timestamp":1784473457828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomzvajl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:16 GMT\r\netag: W/\"1b-6567997b7d965\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5689,"timings":{"blocked":5398,"dns":0,"connect":0,"send":0,"wait":291,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomwfouk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.002Z","timestamp":1784473458002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomwfouk/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:27:25 GMT\r\netag: W/\"1b-6567b895e5a23\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6505,"timings":{"blocked":5898,"dns":0,"connect":0,"send":0,"wait":607,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqeqtlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.153Z","timestamp":1784473458153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqeqtlg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:45 GMT\r\netag: W/\"1b-6567b8e17657c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5294,"timings":{"blocked":4598,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovuasus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.904Z","timestamp":1784473458904,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovuasus/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 16:58:01 GMT\r\netag: W/\"25-656bd57c3f2a2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoznyw7i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.324Z","timestamp":1784473455324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoznyw7i/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 05:55:49 GMT\r\netag: W/\"1b-6550da4e39c7d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico3w6l77/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.223Z","timestamp":1784473456223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico3w6l77/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 01 Jul 2026 05:23:02 GMT\r\netag: W/\"1b-65585e2b21f8d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico3o3794/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.302Z","timestamp":1784473456302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico3o3794/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 07:15:00 GMT\r\netag: W/\"1b-6559b90ef41fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoohxnge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.061Z","timestamp":1784473457061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoohxnge/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:33 GMT\r\netag: W/\"1b-655be30f1f60d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogvnmsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.661Z","timestamp":1784473457661,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogvnmsw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 11 Jul 2026 19:07:28 GMT\r\netag: W/\"1b-6565a917a140f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodxoqys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.411Z","timestamp":1784473458411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodxoqys/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:53 GMT\r\netag: W/\"1b-65683a53fe59b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6407,"timings":{"blocked":5943,"dns":0,"connect":0,"send":0,"wait":464,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/ico7by0f0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.370Z","timestamp":1784473455370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/ico7by0f0/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:15 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 25 Jun 2026 16:17:31 GMT\r\netag: W/\"1b-6551654495cff\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoktedlo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.857Z","timestamp":1784473455857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoktedlo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 27 Jun 2026 17:18:02 GMT\r\netag: W/\"1b-6553f6861bf45\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozirqap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.959Z","timestamp":1784473456959,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozirqap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoeegjcg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.305Z","timestamp":1784473457305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoeegjcg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 06 Jul 2026 07:44:42 GMT\r\netag: W/\"1b-655ec728b8083\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/clxxncur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.748Z","timestamp":1784473457748,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/clxxncur/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 15:31:56 GMT\r\netag: W/\"1b-6566bac8a2282\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomwagrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.862Z","timestamp":1784473458862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomwagrd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 11:41:52 GMT\r\netag: W/\"1b-656b8ed1e7e0d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5027,"timings":{"blocked":4576,"dns":0,"connect":0,"send":0,"wait":451,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icozszghp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.283Z","timestamp":1784473459283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icozszghp/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 19 Jul 2026 11:52:53 GMT\r\netag: W/\"1b-656f56e10e7a0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotfucdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.066Z","timestamp":1784473456066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotfucdy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:24:10 GMT\r\netag: W/\"1b-65557cd07ccc7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqympbl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.492Z","timestamp":1784473456492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqympbl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:34:42 GMT\r\netag: W/\"1b-655a6bce095ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5974,"timings":{"blocked":5617,"dns":0,"connect":0,"send":0,"wait":357,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojrpfll/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.976Z","timestamp":1784473456976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojrpfll/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:55 GMT\r\netag: W/\"1b-655be2eae3080\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7202,"timings":{"blocked":6787,"dns":0,"connect":0,"send":0,"wait":415,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icowbddca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.346Z","timestamp":1784473458346,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icowbddca/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2145,"timings":{"blocked":1632,"dns":0,"connect":0,"send":0,"wait":513,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xcvygv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.705Z","timestamp":1784473458705,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xcvygv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":2993,"dns":0,"connect":0,"send":0,"wait":316,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokmxwyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.134Z","timestamp":1784473459134,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokmxwyy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoxceuqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:15.930Z","timestamp":1784473455930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoxceuqz/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 08:50:37 GMT\r\netag: W/\"1b-6554c6f8843f5\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohzhmna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.029Z","timestamp":1784473457029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohzhmna/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:26 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:22 GMT\r\netag: W/\"1b-655be30483905\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6780,"timings":{"blocked":6282,"dns":0,"connect":0,"send":0,"wait":498,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoovaosm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.956Z","timestamp":1784473458956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoovaosm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 17 Jul 2026 07:16:54 GMT\r\netag: W/\"1b-656c957635501\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4089,"timings":{"blocked":3500,"dns":0,"connect":0,"send":0,"wait":589,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xfeucf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.059Z","timestamp":1784473459059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xfeucf/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:21 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 18 Jul 2026 02:30:49 GMT\r\netag: W/\"1b-656d97611cabb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoafswmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.090Z","timestamp":1784473459090,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoafswmb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1602,"timings":{"blocked":991,"dns":0,"connect":0,"send":0,"wait":611,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorsgt47/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.003Z","timestamp":1784473456003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorsgt47/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 10:51:02 GMT\r\netag: W/\"1b-6554e1e297620\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":931,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqvmxzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.142Z","timestamp":1784473456142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqvmxzn/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:17 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 29 Jun 2026 19:32:51 GMT\r\netag: W/\"1b-655698629e2f2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1018,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocquhbm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.550Z","timestamp":1784473456550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocquhbm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:18 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:35:07 GMT\r\netag: W/\"1b-655a6be5e0e13\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icobrlmws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.143Z","timestamp":1784473457143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icobrlmws/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:09 GMT\r\netag: W/\"1b-655be330ff3c3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icohypuqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.414Z","timestamp":1784473457414,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icohypuqy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icodipvfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.817Z","timestamp":1784473457817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icodipvfb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 08:08:12 GMT\r\netag: W/\"1b-65679977c2824\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":413,"dns":0,"connect":0,"send":0,"wait":496,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icorffcnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.109Z","timestamp":1784473458109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icorffcnb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:24 GMT\r\netag: W/\"1b-6567b8cdaedee\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4595,"timings":{"blocked":4014,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icocmacig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.118Z","timestamp":1784473457118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icocmacig/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:33:56 GMT\r\netag: W/\"1b-655be324adebe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoqnlqdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.501Z","timestamp":1784473457501,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoqnlqdl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3840,"timings":{"blocked":3354,"dns":0,"connect":0,"send":0,"wait":486,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoksbynt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.592Z","timestamp":1784473457592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoksbynt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 10 Jul 2026 12:25:24 GMT\r\netag: W/\"1b-65640d5c9698e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6089,"timings":{"blocked":16,"dns":0,"connect":0,"send":5726,"wait":347,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/sh_jddsbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.616Z","timestamp":1784473457616,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/sh_jddsbo/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoreatze/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.666Z","timestamp":1784473457666,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoreatze/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotiwntv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.766Z","timestamp":1784473457766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotiwntv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 17:52:43 GMT\r\netag: W/\"1b-6566da40578f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3865,"timings":{"blocked":3468,"dns":0,"connect":0,"send":0,"wait":397,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofzwjdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.833Z","timestamp":1784473457833,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofzwjdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/iconhycap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.659Z","timestamp":1784473458659,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/iconhycap/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":1671,"dns":0,"connect":0,"send":0,"wait":276,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icopyedxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.023Z","timestamp":1784473456023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icopyedxl/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:16 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 14:36:24 GMT\r\netag: W/\"1b-65551442310fe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofeyqxe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.984Z","timestamp":1784473456984,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofeyqxe/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosexqdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.801Z","timestamp":1784473457801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosexqdb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:20 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 07:50:09 GMT\r\netag: W/\"1b-6567956e78148\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icovoekiu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.085Z","timestamp":1784473458085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icovoekiu/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 10:28:11 GMT\r\netag: W/\"1b-6567b8c0f703a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5491,"timings":{"blocked":5039,"dns":0,"connect":0,"send":0,"wait":452,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icouuprbm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.823Z","timestamp":1784473458823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icouuprbm/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 16 Jul 2026 06:21:28 GMT\r\netag: W/\"1b-656b47347aa53\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4890,"timings":{"blocked":4309,"dns":0,"connect":0,"send":0,"wait":581,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xkczbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.963Z","timestamp":1784473458963,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xkczbd/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3144,"timings":{"blocked":2540,"dns":0,"connect":0,"send":0,"wait":604,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xovmhw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.971Z","timestamp":1784473458971,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xovmhw/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/vendor/jquery/js/jquery.min.js?3.7.1","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:19.306Z","timestamp":1784473459306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/vendor/jquery/js/jquery.min.js?3.7.1 HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30342\r\nx-content-type-options: nosniff\r\nvary: Accept-encoding\r\nlast-modified: Fri, 04 Oct 2024 01:14:40 GMT\r\netag: \"7686-6239c6535d871\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icomlfcco/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.738Z","timestamp":1784473456738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icomlfcco/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Jul 2026 20:36:23 GMT\r\netag: W/\"1b-655a6c2e7accc\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoiwcxop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.825Z","timestamp":1784473456825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoiwcxop/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Fri, 03 Jul 2026 21:12:53 GMT\r\netag: W/\"1b-655bb634b8328\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icokeyovt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.947Z","timestamp":1784473456947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icokeyovt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:32:40 GMT\r\netag: W/\"1b-655be2dc8d1e2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5319,"timings":{"blocked":4924,"dns":0,"connect":0,"send":0,"wait":395,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icosiqakc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.149Z","timestamp":1784473457149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icosiqakc/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:19 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 04 Jul 2026 00:34:11 GMT\r\netag: W/\"1b-655be33326fde\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icofxgqqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.559Z","timestamp":1784473457559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icofxgqqt/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 09 Jul 2026 15:06:01 GMT\r\netag: W/\"1b-6562ef651fbe1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5942,"timings":{"blocked":5481,"dns":0,"connect":0,"send":0,"wait":461,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icogqggtr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.723Z","timestamp":1784473457723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icogqggtr/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:25 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 12 Jul 2026 07:30:41 GMT\r\netag: W/\"1b-65664f3787afe\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6131,"timings":{"blocked":5832,"dns":0,"connect":0,"send":0,"wait":299,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icojbebrv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.063Z","timestamp":1784473458063,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icojbebrv/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2208,"timings":{"blocked":1694,"dns":0,"connect":0,"send":0,"wait":514,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icoibexle/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:18.354Z","timestamp":1784473458354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icoibexle/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:23 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 13 Jul 2026 20:07:22 GMT\r\netag: W/\"1b-65683a3672e06\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3628,"timings":{"blocked":3223,"dns":0,"connect":0,"send":0,"wait":405,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icolqhbfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"103.89.15.60","port":443,"asn":396949,"as":"CLOUDWEBMANAGE-TX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.047Z","timestamp":1784473456047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thelightrays.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 23:42:35 GMT","end":"Mon, 24 Aug 2026 23:42:34 GMT"},"fingerprint":{"sha1":"18:F5:0F:26:04:AA:E3:1E:45:7E:47:2D:55:61:E8:70:E9:91:C0:3F","sha256":"E1:26:35:40:CD:A8:BC:65:79:58:D2:1B:7E:CF:43:62:86:69:68:E5:3B:79:88:F5:98:4E:33:94:D2:A8:64:79"}}},"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icolqhbfg/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 19 Jul 2026 15:04:24 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 28 Jun 2026 22:22:09 GMT\r\netag: W/\"1b-65557c5cbcf9f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":319,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7f74b9fe710a13f3a235e9353ff13d1b","sha1":"1b160c2f3d687d178149596e2affee672b18dab4","sha256":"e8d3e50e51c694825e0246fd0be8c42f07d617dc8ca86065ae9015c7e8f21b64","sha512":"1efe1982cae1ec4bef55859f21944992d121f98dc4c1573dc89ab0011102bb3c98119eb3ead6bb1f45cac62e464ae324fa0df2757b8ff3d180dd9d2ad8a25a50","ssdeep":"","tlshash":"1e8000a0800820c203a0c00383002a2e0002b02cc2283822e02e000c08c22000a80eac","first_seen":"2026-06-24T05:58:21.312208Z","last_seen":"2026-07-21T15:37:03.125501Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6562,"timings":{"blocked":5866,"dns":0,"connect":0,"send":0,"wait":696,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/icotqnkgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:16.948Z","timestamp":1784473456948,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/icotqnkgy/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thelightrays.com/media/com_sppagebuilder/assets/iconfont/xnnvqb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb","fqdn":"thelightrays.com","domain":"thelightrays.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thelightrays.com/","date":"2026-07-19T15:04:17.424Z","timestamp":1784473457424,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /media/com_sppagebuilder/assets/iconfont/xnnvqb/style.css?2abb743fdfce533d33d8c0eb7ff5cefb HTTP/1.1\r\nHost: thelightrays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thelightrays.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: d8496461e30ebbfeb5f6392ccd6e0398=fl9q68hanbedkptkqpvvrdr3b6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-19","alert":"Phishing Block","trigger":"thelightrays.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"thelightrays.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}